Triage | Malware sandboxing report by Hatching Triage

Sharing

General

Target

informeCritico.pdf
Size

23KB
Sample

230125-mc95xaff94
MD5

30628f0f7f9870aef93172de5936bab6
SHA1

d59b673cf773db9f4b16b806825b2638a582b22b
SHA256

f18652128eed28061610cd1b5c19d5189e3204487934ab67a5d805e0ab64e78b
SHA512

e463573725664ce2f3503714a8f292defe3cbf76806ef3c4fe381be918056496760ca06f862eed8433935f69284029e97ebe1c7720dffcea382708a390030561
SSDEEP

384:YPH1+0O5hhSLH6LS19rMKAN90SVnErRPHVhJp3SbEQSVnEbaCPHLh61SVnELaW8r:oHoJH8aLS/DcueEVHDjibBeE9HVSeERa

Score

10^/10

adobe persistence phishing

Malware Config

Targets

- Target
  
  informeCritico.pdf
- Size
  
  23KB
- MD5
  
  30628f0f7f9870aef93172de5936bab6
- SHA1
  
  d59b673cf773db9f4b16b806825b2638a582b22b
- SHA256
  
  f18652128eed28061610cd1b5c19d5189e3204487934ab67a5d805e0ab64e78b
- SHA512
  
  e463573725664ce2f3503714a8f292defe3cbf76806ef3c4fe381be918056496760ca06f862eed8433935f69284029e97ebe1c7720dffcea382708a390030561
- SSDEEP
  
  384:YPH1+0O5hhSLH6LS19rMKAN90SVnErRPHVhJp3SbEQSVnEbaCPHLh61SVnELaW8r:oHoJH8aLS/DcueEVHDjibBeE9HVSeERa
Score

10^/10

adobe persistence phishing
- Detected adobe phishing page
  phishing adobe
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Matrix

Collection

Command and Control

Credential Access

Defense Evasion

Modify Registry

Discovery

Execution

Exfiltration

Impact

Initial Access

Lateral Movement

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Tasks

static1

behavioral1

behavioral2

adobepersistencephishing