50eb6895edd038541ec2a2051310f4b8fc2558b3dd891ed7ba9ce9e987889132 | Triage

Sharing

General

Target

Txdot Remittance_Advice.html
Size

161KB
Sample

230322-y3qpqsbb24
MD5

e413b747ff25f218628c0222d14a56ae
SHA1

500ccbb955471c803cede52b67f1ac9caffbe101
SHA256

50eb6895edd038541ec2a2051310f4b8fc2558b3dd891ed7ba9ce9e987889132
SHA512

ccc5a890ac0bf07867f653848f4cc12a7c9a27cc0a7f6f71769a411a0f774afddbbd3f510e4fcf1af8f843fb3035327fe88e7ebe78f40445c01b529f21992feb
SSDEEP

3072:EGKrGwsK+Q92A7UmZ64o2qB1+Vi2HBKAJMqX/vPBWKssBqJMyUdAMC:TW7XZAqPhlssBqJM1ZC

Score

5^/10

microsoft phishing

Malware Config

Targets

- Target
  
  Txdot Remittance_Advice.html
- Size
  
  161KB
- MD5
  
  e413b747ff25f218628c0222d14a56ae
- SHA1
  
  500ccbb955471c803cede52b67f1ac9caffbe101
- SHA256
  
  50eb6895edd038541ec2a2051310f4b8fc2558b3dd891ed7ba9ce9e987889132
- SHA512
  
  ccc5a890ac0bf07867f653848f4cc12a7c9a27cc0a7f6f71769a411a0f774afddbbd3f510e4fcf1af8f843fb3035327fe88e7ebe78f40445c01b529f21992feb
- SSDEEP
  
  3072:EGKrGwsK+Q92A7UmZ64o2qB1+Vi2HBKAJMqX/vPBWKssBqJMyUdAMC:TW7XZAqPhlssBqJM1ZC
Score

5^/10

microsoft phishing
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

microsoftphishing

behavioral2

microsoftphishing