178ad69c097b6020ffde876881fe38499ca82be6781e7d47988d3422872a1440 | Triage

Resubmissions

23-11-2024 00:44

241123-a3xw2stkhy 7

23-11-2024 00:40

241123-a1nwcstkd1 10

23-11-2024 00:39

241123-azsg6ayrhq 3

Sharing

General

Target

download.jpeg
Size

8KB
Sample

241123-a3xw2stkhy
MD5

fd59c3cd5e5088281635eced5c20ccaa
SHA1

9ef4149257a4d39e6624cddc320f59f5eee3798d
SHA256

178ad69c097b6020ffde876881fe38499ca82be6781e7d47988d3422872a1440
SHA512

7ed57054b81b5749fded7622510978c82d2bc50602ca845f20234292130a48bed31afcc4da1da6265d7435d1f46826330a22f33b71e242ab59d77046e6761628
SSDEEP

192:N+wAO7JR1SJBL+n+tiNWVxpzS7CYwPW7NDaMMQOOtk3/aHOSqQcC692pXu:N+wR7JR4JBL++xdQCd+JMSohrCHp+

Score

7^/10

microsoft discovery phishing

Malware Config

Targets

- Target
  
  download.jpeg
- Size
  
  8KB
- MD5
  
  fd59c3cd5e5088281635eced5c20ccaa
- SHA1
  
  9ef4149257a4d39e6624cddc320f59f5eee3798d
- SHA256
  
  178ad69c097b6020ffde876881fe38499ca82be6781e7d47988d3422872a1440
- SHA512
  
  7ed57054b81b5749fded7622510978c82d2bc50602ca845f20234292130a48bed31afcc4da1da6265d7435d1f46826330a22f33b71e242ab59d77046e6761628
- SSDEEP
  
  192:N+wAO7JR1SJBL+n+tiNWVxpzS7CYwPW7NDaMMQOOtk3/aHOSqQcC692pXu:N+wR7JR4JBL++xdQCd+JMSohrCHp+
Score

7^/10

microsoft discovery phishing
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Detected potential entity reuse from brand MICROSOFT.
  phishing microsoft
behavioral1 behavioral2 behavioral3 behavioral4 behavioral5

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

microsoftdiscoveryphishing

behavioral2

behavioral3

behavioral4

behavioral5