Overview

overview

6

Static

static

1

8AGiNib.rar

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8AGiNib.rar

  • Size

    1.1MB

  • Sample

    240420-mpm6xaee74

  • MD5

    ebe86d143c90be14c6e89687687934b5

  • SHA1

    b150ce4803f072725f4c370451453e4e447db236

  • SHA256

    ee463b2ecad1ec06f3752f4514dd6e5bdc536e345d3de615f0b510eb21e4b044

  • SHA512

    0591e27430a60e8f87665f157baed4e7ab4c2a3aa039afc3c1b38db2ac39652df8c60f7997585840849750db9ed1305edbc05eb7bee6de6a399e8d1e63e04b48

  • SSDEEP

    24576:ie0JKBjlF7NDgYTX72be2XuXrZS8w6TQbC+U/p0aFQ/gdOQBKWlm:i9QBxDzX6be2+XNZwxbC+UR0aFQ/gdBU

Score
6/10
microsoftphishing

Malware Config

Targets

    • Target

      8AGiNib.rar

    • Size

      1.1MB

    • MD5

      ebe86d143c90be14c6e89687687934b5

    • SHA1

      b150ce4803f072725f4c370451453e4e447db236

    • SHA256

      ee463b2ecad1ec06f3752f4514dd6e5bdc536e345d3de615f0b510eb21e4b044

    • SHA512

      0591e27430a60e8f87665f157baed4e7ab4c2a3aa039afc3c1b38db2ac39652df8c60f7997585840849750db9ed1305edbc05eb7bee6de6a399e8d1e63e04b48

    • SSDEEP

      24576:ie0JKBjlF7NDgYTX72be2XuXrZS8w6TQbC+U/p0aFQ/gdOQBKWlm:i9QBxDzX6be2+XNZwxbC+UR0aFQ/gdBU

    Score
    6/10
    microsoftphishing

    • Legitimate hosting services abused for malware hosting/C2

    • Detected potential entity reuse from brand microsoft.

      phishingmicrosoft

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Command and Scripting Interpreter

1
T1059

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

4
T1082

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Resource Development

Reconnaissance

Tasks