018aae5b07b4734a740a205fe229be4887df8b756a19e3dae02fb7e7277f66a4 | Triage

Sharing

General

Target

018aae5b07b4734a740a205fe229be4887df8b756a19e3dae02fb7e7277f66a4
Size

72KB
Sample

240606-wsla6ahf7z
MD5

83799728a5f56af6c92fa89b68c13b79
SHA1

cde7df483f5c494dfd475919f5824135641a4d69
SHA256

018aae5b07b4734a740a205fe229be4887df8b756a19e3dae02fb7e7277f66a4
SHA512

c20e51391cc7ae0d189978fc65b1a112aa76fbb9cf7d873e53a088d4728db89db552c174aa0994cddbd1a39e0d279a25a9cf20577b495a5492666ff777b49226
SSDEEP

384:y6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2C:ypQNwC3BEddsEqOt/hyJF+x3BEJwRrO

Score

10^/10

evasion

Malware Config

Targets

- Target
  
  018aae5b07b4734a740a205fe229be4887df8b756a19e3dae02fb7e7277f66a4
- Size
  
  72KB
- MD5
  
  83799728a5f56af6c92fa89b68c13b79
- SHA1
  
  cde7df483f5c494dfd475919f5824135641a4d69
- SHA256
  
  018aae5b07b4734a740a205fe229be4887df8b756a19e3dae02fb7e7277f66a4
- SHA512
  
  c20e51391cc7ae0d189978fc65b1a112aa76fbb9cf7d873e53a088d4728db89db552c174aa0994cddbd1a39e0d279a25a9cf20577b495a5492666ff777b49226
- SSDEEP
  
  384:y6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2C:ypQNwC3BEddsEqOt/hyJF+x3BEJwRrO
Score

10^/10

evasion
- Modifies visibility of file extensions in Explorer
  evasion
- Disables RegEdit via registry modification
  evasion
- Drops file in Drivers directory
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2