06a0b282d9c04ef59214efd6504e074db66d7c3e415bbf6a08a997c45c5ddaf6 | Triage

Sharing

General

Target

06a0b282d9c04ef59214efd6504e074db66d7c3e415bbf6a08a997c45c5ddaf6
Size

80KB
Sample

240914-w3ddasyere
MD5

107c5f26335031881ee71eab49cf2d99
SHA1

c9ed417ab948616fc332ff9cfc206b348a4f7777
SHA256

06a0b282d9c04ef59214efd6504e074db66d7c3e415bbf6a08a997c45c5ddaf6
SHA512

647b7f59bccda8a7f93253a528a6de6ce70f02ea89431929052aad2e2699df7e23b1ffe662fd2fcf9ed2ce9e44c8580b14794bd6e0a5e77ba38a39d39fa5bed1
SSDEEP

1536:akTng4MAOji/dD4kxRHgIxbba2LlaIZTJ+7LhkiB0:akTnRMA4wCkxRAWPnlaMU7ui

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  06a0b282d9c04ef59214efd6504e074db66d7c3e415bbf6a08a997c45c5ddaf6
- Size
  
  80KB
- MD5
  
  107c5f26335031881ee71eab49cf2d99
- SHA1
  
  c9ed417ab948616fc332ff9cfc206b348a4f7777
- SHA256
  
  06a0b282d9c04ef59214efd6504e074db66d7c3e415bbf6a08a997c45c5ddaf6
- SHA512
  
  647b7f59bccda8a7f93253a528a6de6ce70f02ea89431929052aad2e2699df7e23b1ffe662fd2fcf9ed2ce9e44c8580b14794bd6e0a5e77ba38a39d39fa5bed1
- SSDEEP
  
  1536:akTng4MAOji/dD4kxRHgIxbba2LlaIZTJ+7LhkiB0:akTnRMA4wCkxRAWPnlaMU7ui
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence