0f16b107e5b0e328f7c9b0ba72516e52df4933040a2e0a7d4ca097df9e6389fc | Triage

Sharing

General

Target

0e1ade0a-ead5-4969-a9bc-043d7cf7b0e2.WAV
Size

301KB
Sample

231031-avd4zaff4v
MD5

83c4a754a364c039e4c2dfd9231a8636
SHA1

cca2512cd2fe861c32819bbbbadc79b408554818
SHA256

0f16b107e5b0e328f7c9b0ba72516e52df4933040a2e0a7d4ca097df9e6389fc
SHA512

d6c9eb0461900e6421ec946f69e0ac4c479f80af19e8796c006150c14660d8062470ffd9419b34f86ca2016ab7a1bb5a7320e728c877bf6f9f3f6f7c250b3a86
SSDEEP

6144:zHTZyzEV9+BhcpZqTrxcmx8go6aPcDEHe5yFfn+fOL4nJ6p7/tAVdXOYxhhd6lHf:zHgzE9+Bh6Zm7x8bPP514G42/t1CvdsX

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  0e1ade0a-ead5-4969-a9bc-043d7cf7b0e2.WAV
- Size
  
  301KB
- MD5
  
  83c4a754a364c039e4c2dfd9231a8636
- SHA1
  
  cca2512cd2fe861c32819bbbbadc79b408554818
- SHA256
  
  0f16b107e5b0e328f7c9b0ba72516e52df4933040a2e0a7d4ca097df9e6389fc
- SHA512
  
  d6c9eb0461900e6421ec946f69e0ac4c479f80af19e8796c006150c14660d8062470ffd9419b34f86ca2016ab7a1bb5a7320e728c877bf6f9f3f6f7c250b3a86
- SSDEEP
  
  6144:zHTZyzEV9+BhcpZqTrxcmx8go6aPcDEHe5yFfn+fOL4nJ6p7/tAVdXOYxhhd6lHf:zHgzE9+Bh6Zm7x8bPP514G42/t1CvdsX
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2