Overview

overview

7

Static

static

3

1a26c7b8c4...11.exe

windows7-x64

7

1a26c7b8c4...11.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1a26c7b8c49b56d74fbf6661ae00e1992622a336306261c052be076b6d3edf11

  • Size

    117KB

  • Sample

    240418-kbge4afh92

  • MD5

    9423f283f6987f1bcee8b20d9b82dd0a

  • SHA1

    a3c1c2b6b3791d417f090d5e522350e3bc38699f

  • SHA256

    1a26c7b8c49b56d74fbf6661ae00e1992622a336306261c052be076b6d3edf11

  • SHA512

    db94a3fcc72593d43d62422cbe17b25efe8a0529d6e004e58443bb503f3b3fb84e5a439d6c927722b48ca6baf18a85a50ab101d8aede04845eb8cdf8fb136577

  • SSDEEP

    768:pN16GVRu1yK9fMnJG2V9dHS8z7jlIN3NijHP+ei1qc45pDRPPh8kDL6ZnK0mChbU:pL3SHuJV9N0mrDuZhwcy

Score
7/10
microsoftphishing

Malware Config

Targets

    • Target

      1a26c7b8c49b56d74fbf6661ae00e1992622a336306261c052be076b6d3edf11

    • Size

      117KB

    • MD5

      9423f283f6987f1bcee8b20d9b82dd0a

    • SHA1

      a3c1c2b6b3791d417f090d5e522350e3bc38699f

    • SHA256

      1a26c7b8c49b56d74fbf6661ae00e1992622a336306261c052be076b6d3edf11

    • SHA512

      db94a3fcc72593d43d62422cbe17b25efe8a0529d6e004e58443bb503f3b3fb84e5a439d6c927722b48ca6baf18a85a50ab101d8aede04845eb8cdf8fb136577

    • SSDEEP

      768:pN16GVRu1yK9fMnJG2V9dHS8z7jlIN3NijHP+ei1qc45pDRPPh8kDL6ZnK0mChbU:pL3SHuJV9N0mrDuZhwcy

    Score
    7/10
    microsoftphishing

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Detected potential entity reuse from brand microsoft.

      phishingmicrosoft
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

3
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks