1f51589787a98ba6a2435553db6796c08fbefcd8eea9a6fafa65ddb7259b9c9e | Triage

Submit
Reports

Overview

overview

7

Static

static

1

sample.html

windows11-21h2-x64

7

Sharing

General

Target

sample
Size

19KB
Sample

241209-s3jcrsxmbj
MD5

c2e95155a0e4cae97bf580b90bc1f642
SHA1

e7ddd085eea71bf36a0cf3ab272807020a775602
SHA256

1f51589787a98ba6a2435553db6796c08fbefcd8eea9a6fafa65ddb7259b9c9e
SHA512

0e0800d48d5c57f0ef1b2047bf32a57fade5eb6be8fc9f4bc9b0799215fa189de56ba840a892366984dcf407ab89bf49dc6f919063c1d7b5a205b2d16d16fbc3
SSDEEP

384:Xp01ocy4f4lbGaaBvhpNsT0z9lObz6r0sZxmfg1xCejiw:Xe1ocy4gEa+JpNi0Sbz6r0sZuqxPiw

Score

7^/10

microsoft discovery motw phishing

Static task

static1

Behavioral task

behavioral1

Sample

sample.html

Resource

win11-20241007-en

microsoft discovery motw phishing

windows11-21h2-x64

16 signatures

150 seconds

Malware Config

Targets

- Target
  
  sample
- Size
  
  19KB
- MD5
  
  c2e95155a0e4cae97bf580b90bc1f642
- SHA1
  
  e7ddd085eea71bf36a0cf3ab272807020a775602
- SHA256
  
  1f51589787a98ba6a2435553db6796c08fbefcd8eea9a6fafa65ddb7259b9c9e
- SHA512
  
  0e0800d48d5c57f0ef1b2047bf32a57fade5eb6be8fc9f4bc9b0799215fa189de56ba840a892366984dcf407ab89bf49dc6f919063c1d7b5a205b2d16d16fbc3
- SSDEEP
  
  384:Xp01ocy4f4lbGaaBvhpNsT0z9lObz6r0sZxmfg1xCejiw:Xe1ocy4gEa+JpNi0Sbz6r0sZuqxPiw
Score

7^/10

microsoft discovery motw phishing
- A potential corporate email address has been identified in the URL: [email protected]
  phishing
- Mark of the Web detected: This indicates that the page was originally saved or cloned.
  phishing motw
- Detected potential entity reuse from brand MICROSOFT.
  phishing microsoft
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

microsoftdiscoverymotwphishing

© 2018-2024

Terms | Privacy