hxxps://cctdigisol-my[.]sharepoint[.]com/[:]o[:]/g/personal/smeet_m_communicationcrafts_com/EhlforyapBlAtVaTHrsoykIBY4ESkDz7eko4t_qhDIoFmQ?e=K6IS0y | Triage

Submit
Reports

Overview

overview

6

Static

static

1

URLScan

urlscan

1

https://cctdigisol-m...

windows10-2004-x64

6

Sharing

General

Target

https://cctdigisol-my.sharepoint.com/:o:/g/personal/smeet_m_communicationcrafts_com/EhlforyapBlAtVaTHrsoykIBY4ESkDz7eko4t_qhDIoFmQ?e=K6IS0y
Sample

230322-qg9xgsgh97

Score

6^/10

microsoft persistence phishing

Static task

static1

URLScan task

urlscan1

Behavioral task

behavioral1

Sample

https://cctdigisol-my.sharepoint.com/:o:/g/personal/smeet_m_communicationcrafts_com/EhlforyapBlAtVaTHrsoykIBY4ESkDz7eko4t_qhDIoFmQ?e=K6IS0y

Resource

win10v2004-20230220-en

microsoft persistence phishing

windows10-2004-x64

15 signatures

150 seconds

Malware Config

Targets

- Target
  
  https://cctdigisol-my.sharepoint.com/:o:/g/personal/smeet_m_communicationcrafts_com/EhlforyapBlAtVaTHrsoykIBY4ESkDz7eko4t_qhDIoFmQ?e=K6IS0y
Score

6^/10

microsoft persistence phishing
- Adds Run key to start application
  persistence
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

urlscan1

behavioral1

microsoftpersistencephishing

© 2018-2024

Terms | Privacy