06ab63244f9e79e637ddcccb69c67f4a357b6422480f7e7fcfc1a6b0143e6f34 | Triage

Sharing

General

Target

06ab63244f9e79e637ddcccb69c67f4a357b6422480f7e7fcfc1a6b0143e6f34
Size

83KB
Sample

240611-w48ktswgna
MD5

b911bdbf56b12b9e9e8da3bcae94d58f
SHA1

8d5c6238a04c35c0bd5d8eca64c1e675958e13cf
SHA256

06ab63244f9e79e637ddcccb69c67f4a357b6422480f7e7fcfc1a6b0143e6f34
SHA512

d986a61801e7ea964956811c79a6e04367ccb0e45a14df38ebabf88566ac019602bf2cf44bed479d65a45aaf3e8f338c8f3c1007b07798e6b3c1788f5756b17e
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOYep5qD7:GhfxHNIreQm+Hirep5qD7

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  06ab63244f9e79e637ddcccb69c67f4a357b6422480f7e7fcfc1a6b0143e6f34
- Size
  
  83KB
- MD5
  
  b911bdbf56b12b9e9e8da3bcae94d58f
- SHA1
  
  8d5c6238a04c35c0bd5d8eca64c1e675958e13cf
- SHA256
  
  06ab63244f9e79e637ddcccb69c67f4a357b6422480f7e7fcfc1a6b0143e6f34
- SHA512
  
  d986a61801e7ea964956811c79a6e04367ccb0e45a14df38ebabf88566ac019602bf2cf44bed479d65a45aaf3e8f338c8f3c1007b07798e6b3c1788f5756b17e
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOYep5qD7:GhfxHNIreQm+Hirep5qD7
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2