de6a821a7c6ea6c82dacae75bb31187b73facfca2c1cd6f39a29eb9ccad6ca74 | Triage

Submit
Reports

Overview

overview

Static

static

7

de6a821a7c...74.exe

windows7-x64

7

de6a821a7c...74.exe

windows10-2004-x64

Sharing

General

Target

de6a821a7c6ea6c82dacae75bb31187b73facfca2c1cd6f39a29eb9ccad6ca74
Size

29KB
Sample

240605-ewtchadh6x
MD5

b7fa3e13502e6ecf1b4a1caa9f92e530
SHA1

af85c9436e259c5946b4e9562217373bd7f5a486
SHA256

de6a821a7c6ea6c82dacae75bb31187b73facfca2c1cd6f39a29eb9ccad6ca74
SHA512

0310e664d5e29aa90a31d09f6682fd425471a4d28eaeaba6c73e1bcb2835b130ca7478806e08dd38825ce823707ad2f3a276227c8bcaae424d9d83e68ef43eb8
SSDEEP

768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/mW:AEwVs+0jNDY1qi/quW

Score

10^/10

microsoft persistence phishing product:outlook upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

de6a821a7c6ea6c82dacae75bb31187b73facfca2c1cd6f39a29eb9ccad6ca74.exe

Resource

win7-20240419-en

persistence upx

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

de6a821a7c6ea6c82dacae75bb31187b73facfca2c1cd6f39a29eb9ccad6ca74.exe

Resource

win10v2004-20240426-en

microsoft persistence phishing product:outlook upx

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  de6a821a7c6ea6c82dacae75bb31187b73facfca2c1cd6f39a29eb9ccad6ca74
- Size
  
  29KB
- MD5
  
  b7fa3e13502e6ecf1b4a1caa9f92e530
- SHA1
  
  af85c9436e259c5946b4e9562217373bd7f5a486
- SHA256
  
  de6a821a7c6ea6c82dacae75bb31187b73facfca2c1cd6f39a29eb9ccad6ca74
- SHA512
  
  0310e664d5e29aa90a31d09f6682fd425471a4d28eaeaba6c73e1bcb2835b130ca7478806e08dd38825ce823707ad2f3a276227c8bcaae424d9d83e68ef43eb8
- SSDEEP
  
  768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/mW:AEwVs+0jNDY1qi/quW
Score

10^/10

persistence upx microsoft phishing product:outlook
- Detected microsoft outlook phishing page
  phishing microsoft product:outlook
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishingproduct:outlookupx

© 2018-2024

Terms | Privacy