33bee24075e61fee3c71d2fb3916677725d3474d147c21c71884f4ed6a5f9786 | Triage

Resubmissions

06/08/2024, 02:59

240806-dgxkyaxenp 5

06/08/2024, 02:56

240806-de4apsxejr 3

Sharing

General

Target

GeoPhotoService.js
Size

351KB
Sample

240806-dgxkyaxenp
MD5

ac074cb186db2bdb397a0d7c4f05ef81
SHA1

0fc9c3d9b8b72683f15e1f9cfb0863a14fafd0e5
SHA256

33bee24075e61fee3c71d2fb3916677725d3474d147c21c71884f4ed6a5f9786
SHA512

b740e777f53daf816800042cb42ece84cc0da47def9a7f2e4442d2d26cc6f6c8b1eddfa055c35ad3b3e9c0ac8955b43bbf9e143efd07a00c23d5b41287a6c285
SSDEEP

384:pbNAeTmfe718CrZ4elHtPIoAu+QZp0vLJ4bUzrLpboL4VixXRKbOEnjpwkO678W1:7BqBPgKAcixXRKCGan6vrcMrvuB+

Score

5^/10

microsoft discovery execution persistence phishing privilege_escalation

Malware Config

Targets

- Target
  
  GeoPhotoService.js
- Size
  
  351KB
- MD5
  
  ac074cb186db2bdb397a0d7c4f05ef81
- SHA1
  
  0fc9c3d9b8b72683f15e1f9cfb0863a14fafd0e5
- SHA256
  
  33bee24075e61fee3c71d2fb3916677725d3474d147c21c71884f4ed6a5f9786
- SHA512
  
  b740e777f53daf816800042cb42ece84cc0da47def9a7f2e4442d2d26cc6f6c8b1eddfa055c35ad3b3e9c0ac8955b43bbf9e143efd07a00c23d5b41287a6c285
- SSDEEP
  
  384:pbNAeTmfe718CrZ4elHtPIoAu+QZp0vLJ4bUzrLpboL4VixXRKbOEnjpwkO678W1:7BqBPgKAcixXRKCGan6vrcMrvuB+
Score

5^/10

microsoft discovery execution persistence phishing privilege_escalation
- Detected potential entity reuse from brand microsoft.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Event Triggered Execution

Accessibility Features

Privilege Escalation

Event Triggered Execution

Accessibility Features

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

microsoftdiscoveryexecutionpersistencephishingprivilege_escalation

behavioral2