600d6151fe47eb99535638c7fed1183996d94ef603e0f8469383e058a3ed3f9f

Resubmissions

26/03/2025, 13:56

250326-q8qmxsxr18 6

25/03/2025, 16:34

250325-t3db7asnz6 4

25/03/2025, 16:12

250325-tnkgyssmv2 7

Sharing

Copy URL

Twitter E-mail

General

Target

FirstLogonAnim.html
Size

101KB
Sample

250325-tnkgyssmv2
MD5

d563f7a009fb7ac826c88dfd5cfe55d9
SHA1

92e3a38de7c6fae27bfb08f40c9d28780407c26f
SHA256

600d6151fe47eb99535638c7fed1183996d94ef603e0f8469383e058a3ed3f9f
SHA512

adf9f99b8419d4e1bf42be7a6128066df53d23359c319fe6ab3137811338778abaa2cb09d5411977edb9340491cc7a70a9c291fb2a2f6f8f2fb5270753903909
SSDEEP

768:5fDDI+fh378/tZ5vAiwf/ysFIVusFIVFDVgLRDVy18mCgLkm3y1km3gLRm3y1eDK:5bDIvwWxSAVUrhia

Score

7^/10

Malware Config

Targets

- Target
  
  FirstLogonAnim.html
- Size
  
  101KB
- MD5
  
  d563f7a009fb7ac826c88dfd5cfe55d9
- SHA1
  
  92e3a38de7c6fae27bfb08f40c9d28780407c26f
- SHA256
  
  600d6151fe47eb99535638c7fed1183996d94ef603e0f8469383e058a3ed3f9f
- SHA512
  
  adf9f99b8419d4e1bf42be7a6128066df53d23359c319fe6ab3137811338778abaa2cb09d5411977edb9340491cc7a70a9c291fb2a2f6f8f2fb5270753903909
- SSDEEP
  
  768:5fDDI+fh378/tZ5vAiwf/ysFIVusFIVFDVgLRDVy18mCgLkm3y1km3gLRm3y1eDK:5bDIvwWxSAVUrhia
Score

7^/10

microsoft discovery phishing
- A potential corporate email address has been identified in the URL: [email protected]
  phishing
- Legitimate hosting services abused for malware hosting/C2
- Detected potential entity reuse from brand MICROSOFT.
  phishing microsoft
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

A potential corporate email address has been identified in the URL: [email protected]

Legitimate hosting services abused for malware hosting/C2

Detected potential entity reuse from brand MICROSOFT.

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4