7db7e21e63acbec6282b3757ac5b286a3cd9f83d2b82d6f438a79dae94e84a67

General

Target
WOMicClientSetup6.3.exe
Size 1.7MB
Sample260516-kner2abz4y
SHA256 7db7e21e63acbec6282b3757ac5b286a3cd9f83d2b82d6f438a79dae94e84a67
MD5 a30d52ff282f62076fbcdb8877176d69
SHA1 a1f94d917d05fa978e4f7d32ffd3443bace4d862
SHA512 5f1275d12b2db4f636391bc55d7ff9aea4c470199bda20d451a998aa549ec92926748d8b1226eb96fff3a35c9baed2da109af517ad37455e02fb52115770f524
SSDEEP 24576:Ypr5p0LKU6CnTZh5GYP7INP4w6ZtwZdsIAljoXHNAi7JYYDd+7PJCX:e1p0WSlDzBaZfuo3HYnPJ+
TLSH
T18B8523107210ED49D8AC6A32CD77ED6C0464BE6C2E289BC6F2C1BF1FA57134EE9B4195
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  WOMicClientSetup6.3.exe
- Size 1.7MB
- SHA256 7db7e21e63acbec6282b3757ac5b286a3cd9f83d2b82d6f438a79dae94e84a67
- MD5 a30d52ff282f62076fbcdb8877176d69
- SHA1 a1f94d917d05fa978e4f7d32ffd3443bace4d862
- SHA512 5f1275d12b2db4f636391bc55d7ff9aea4c470199bda20d451a998aa549ec92926748d8b1226eb96fff3a35c9baed2da109af517ad37455e02fb52115770f524
- SSDEEP 24576:Ypr5p0LKU6CnTZh5GYP7INP4w6ZtwZdsIAljoXHNAi7JYYDd+7PJCX:e1p0WSlDzBaZfuo3HYnPJ+
- TLSH
  T18B8523107210ED49D8AC6A32CD77ED6C0464BE6C2E289BC6F2C1BF1FA57134EE9B4195
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

microsoft defense_evasion phishing
- A potential corporate email address has been identified in the URL: [email protected]
  phishing
- Detected potential entity reuse from brand MICROSOFT.
  phishing microsoft
behavioral1
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 f577b66492e97c7b8bf515398d8deb745abafd74f56fc03e67fce248ebbeb873
- MD5 174708997758321cf926b69318c6c3f5
- SHA1 645488089bf320f6864e0d0bc284c85216e56fbd
- SHA512 214433597e04ca1ff9b4fe092d5d2997707a7c56f0f82c85d586088a200e4455028f3b9427d87b4f06f9252557d5be4b7a9138ea6a8d045df6209421fd8ca054
- SSDEEP 48:S46+/ZTKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8mCofjLl:zDuPbOBtWZBV8jAWiAJCdv2CmpL
- TLSH
  T1E1C19370B3C248B9D491513368E733D36A12EE746784600F9B6711AA38209F7AD3EBC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 982c5fb7ada7d8c9bc3e419d1c35da6f05bc5dd845940c179af3a33d00a36a8b
- MD5 0ff2d70cfdc8095ea99ca2dabbec3cd7
- SHA1 10c51496d37cecd0e8a503a5a9bb2329d9b38116
- SHA512 cb5fc0b3194f469b833c2c9abf493fcec5251e8609881b7f5e095b9bd09ed468168e95dda0ba415a7d8d6b7f0dee735467c0ed8e52b223eb5359986891ba6e2e
- SSDEEP 192:eK24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35OlASl:u8QIl975eXqlWBrz7YLOlA
- TLSH
  T12B325C02135481F3E4918138C86B3A276B6A15029BF98E57DFD39646BE30BE3BD7D603
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 aedb5122c12037bcf5c79c2197d1474e759cf47c67c37cdb21cf27428854a55b
- MD5 d6c3dd680c6467d07d730255d0ee5d87
- SHA1 57e7a1d142032652256291b8ed2703b3dc1dfa9b
- SHA512 c28613d6d91c1f1f7951116f114da1c49e5f4994c855e522930bb4a8bdd73f12cadf1c6dcb84fc8d9f983ec60a40ac39522d3f86695e17ec88da4bd91c7b6a51
- SSDEEP 192:oWa8cSzvTyl4tgi8pPjQM0PuAg0YNyZIFtSP:DaBSzm+t18pZ0WAg0RZIFg
- TLSH
  T1CE12F793E5A820B3C2D3523F35BE2B2ED7B95335B0512C0482738A497A6947A6E38347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

1

T1564

Resource Forking

1

T1564.009

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

A potential corporate email address has been identified in the URL: [email protected]

Detected potential entity reuse from brand MICROSOFT.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4