2a33b7926e8bcf707f1c32fd49a339862fc46b18bf02b370d0a3420fd5091db5 | Triage

Sharing

General

Target

recaptcha-verify
Size

2KB
Sample

241107-rrj99atfrc
MD5

500479d13faca2adba6ce4a330d8efa6
SHA1

82d1e8ae8d2065b210927a45833947a5ce2695a4
SHA256

2a33b7926e8bcf707f1c32fd49a339862fc46b18bf02b370d0a3420fd5091db5
SHA512

119d552a9adbfb66beeb6158755cf396a369a2df6c99d29a229c670f0e3a0b05477a580a09561446cca7ffa1a31da3e550e99ae673e3f35a943e973fa1410207

Score

8^/10

google discovery phishing

Malware Config

Targets

- Target
  
  recaptcha-verify
- Size
  
  2KB
- MD5
  
  500479d13faca2adba6ce4a330d8efa6
- SHA1
  
  82d1e8ae8d2065b210927a45833947a5ce2695a4
- SHA256
  
  2a33b7926e8bcf707f1c32fd49a339862fc46b18bf02b370d0a3420fd5091db5
- SHA512
  
  119d552a9adbfb66beeb6158755cf396a369a2df6c99d29a229c670f0e3a0b05477a580a09561446cca7ffa1a31da3e550e99ae673e3f35a943e973fa1410207
Score

8^/10

google discovery phishing
- Blocklisted process makes network request
- A potential corporate email address has been identified in the URL: [email protected]
  phishing
- Detected potential entity reuse from brand GOOGLE.
  phishing google
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

googlediscoveryphishing

behavioral2

googlediscoveryphishing