06d6ecc5f9d88636b0bac62218c296bfa1b2222f734c9cbed5575bd9f634e219 | Triage

Resubmissions

08/04/2024, 12:25

240408-plvgxscd2t 10

Sharing

General

Target

winrar-x64-621.exe
Size

3.4MB
Sample

240408-plvgxscd2t
MD5

766ac70b840c029689d3c065712cf46e
SHA1

e54f4628076d81b36de97b01c098a2e7ba123663
SHA256

06d6ecc5f9d88636b0bac62218c296bfa1b2222f734c9cbed5575bd9f634e219
SHA512

49064dc2c30eecd7320a6431abfee49d250ea7cda5e8ae630d2c55325f5bdf338355ae8d7a3246b4036afce5c100b8b30599baf19ab64d20190392d2d9a28608
SSDEEP

98304:JXBOBfKwtPLkq+mYc1SItulce0nDd/n/Y4TsL0Ffxm:JX/wtgdxIece0nelj

Score

10^/10

discovery persistence phishing

Malware Config

Targets

- Target
  
  winrar-x64-621.exe
- Size
  
  3.4MB
- MD5
  
  766ac70b840c029689d3c065712cf46e
- SHA1
  
  e54f4628076d81b36de97b01c098a2e7ba123663
- SHA256
  
  06d6ecc5f9d88636b0bac62218c296bfa1b2222f734c9cbed5575bd9f634e219
- SHA512
  
  49064dc2c30eecd7320a6431abfee49d250ea7cda5e8ae630d2c55325f5bdf338355ae8d7a3246b4036afce5c100b8b30599baf19ab64d20190392d2d9a28608
- SSDEEP
  
  98304:JXBOBfKwtPLkq+mYc1SItulce0nDd/n/Y4TsL0Ffxm:JX/wtgdxIece0nelj
Score

10^/10

discovery persistence phishing
- Detected phishing page
  phishing
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencephishing

behavioral2