b1c6ef03e4aa57dc005b135a72bd6e5c133fc2d795270a7c3c0920581a0ec73c | Triage

Sharing

General

Target

AW_ Microsoft Office365 - Immediate Payment Required for Overdue Invoice#[05-369M3LM3].eml
Size

37KB
Sample

241119-hfee7a1epa
MD5

4f6fd088db85e1aa97a59a52eabdfef9
SHA1

546a16e56517de0a55628ea78bab0da89df5a68f
SHA256

b1c6ef03e4aa57dc005b135a72bd6e5c133fc2d795270a7c3c0920581a0ec73c
SHA512

48d57b78dc12ad9ccb799688846b7c57ad1eea7586e3000e20c5f7df950d772599a528520bbc59327913b053d086238a6ea6848e2bea993002d5107c04af9aac
SSDEEP

768:cePeVT5rDY4moUopNqDS5Nboy3PXR8k/lIe4jcwISsUuF:cmeVdo4nU0NqINUyqKlIe4I5Ug

Score

7^/10

microsoft discovery phishing

Malware Config

Targets

- Target
  
  View_Receipt_Details_I(#B30NO).html
- Size
  
  4KB
- MD5
  
  ba1b3b0fcd862207f4dc5df88a5bb730
- SHA1
  
  0b0e664093516e72d3fb1c3eaafa4add8731a3b0
- SHA256
  
  dab8659e66568c4ad08128890a6ee00710f46cfc75b4e49aead8aafe95ee939f
- SHA512
  
  50003ca03c2e76aa549582f3f6bd0ff974e979b76d2abf071a8d38c59835fedab4477dd6f67d07e9b9f955401bb2cc51866ce47eba814816c29ea66888b68be7
- SSDEEP
  
  48:tPy4M2b0jldFNThoVSYVAfaVGa4TftDEuArNKGN3GgH/deF9UdG5avDTJYapGodp:Y4MJvF9t8S5RAZJ7430JYapGoP+7GMLw
Score

7^/10

discovery microsoft phishing
- A potential corporate email address has been identified in the URL: [email protected]
  phishing
- Detected potential entity reuse from brand MICROSOFT.
  phishing microsoft
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftdiscoveryphishing