ffd75540b52e4e5ad5725d58ce5af9d65e4984789aff76d82ad2fc5715df0357 | Triage

Submit
Reports

Overview

overview

Static

static

1

download.jpg

windows11-21h2-x64

Sharing

General

Target

download.jpeg
Size

8KB
Sample

241209-wym2yawpbw
MD5

481a86abe01f14ad73d0d93e454ed545
SHA1

065757d42e841d3448ea2ed5faae9ee0bf9aed97
SHA256

ffd75540b52e4e5ad5725d58ce5af9d65e4984789aff76d82ad2fc5715df0357
SHA512

b39935b0a026fe5c500c7e575da1922f22cf8a439b22d74ff1a7187b3786c18a7ae5568f9f34af4279560fba5a741a3760613eb903f836d444b246c5d56ed4d5
SSDEEP

192:eWY1Lq5qF7bH2cGfx/XmqUZWJgrKj14Y25DXiX:eWY1FJrufBXvIKR14T5WX

Score

10^/10

microsoft discovery persistence phishing privilege_escalation product:outlook

Static task

static1

Behavioral task

behavioral1

Sample

download.jpg

Resource

win11-20241007-en

microsoft discovery persistence phishing privilege_escalation product:outlook

windows11-21h2-x64

19 signatures

150 seconds

Malware Config

Targets

- Target
  
  download.jpeg
- Size
  
  8KB
- MD5
  
  481a86abe01f14ad73d0d93e454ed545
- SHA1
  
  065757d42e841d3448ea2ed5faae9ee0bf9aed97
- SHA256
  
  ffd75540b52e4e5ad5725d58ce5af9d65e4984789aff76d82ad2fc5715df0357
- SHA512
  
  b39935b0a026fe5c500c7e575da1922f22cf8a439b22d74ff1a7187b3786c18a7ae5568f9f34af4279560fba5a741a3760613eb903f836d444b246c5d56ed4d5
- SSDEEP
  
  192:eWY1Lq5qF7bH2cGfx/XmqUZWJgrKj14Y25DXiX:eWY1FJrufBXvIKR14T5WX
Score

10^/10

microsoft discovery persistence phishing privilege_escalation product:outlook
- Detected microsoft outlook phishing page
  phishing microsoft product:outlook
- Legitimate hosting services abused for malware hosting/C2
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

microsoftdiscoverypersistencephishingprivilege_escalationproduct:outlook

© 2018-2025

Terms | Privacy