f04bda4839e0e23480ff96288086cfba799b958d5478161299fdfaebab902f18 | Triage

Sharing

General

Target

f04bda4839e0e23480ff96288086cfba799b958d5478161299fdfaebab902f18
Size

40KB
Sample

221002-l626qacadm
MD5

6fb7128ff497f4072f4478d684cbcab1
SHA1

dfecc74718f3636d382fabdadf6f85ec000bc715
SHA256

f04bda4839e0e23480ff96288086cfba799b958d5478161299fdfaebab902f18
SHA512

b0df7afa8641b6a9bdcb24fbcc81b01f8b826d2fb72eca5b4e86a96cc50f2d172323a3ffb2c3c82dcda57c9bc96271ed1e93ed1b736e33a756ce76784cf391f9
SSDEEP

768:/GklvetkSuW2UY2F+lUQXarWYw2ssUZZXVy0alOIH:/GiqkSGOF+lUTWYsy0aOIH

Score

8^/10

discovery exploit persistence

Malware Config

Targets

- Target
  
  f04bda4839e0e23480ff96288086cfba799b958d5478161299fdfaebab902f18
- Size
  
  40KB
- MD5
  
  6fb7128ff497f4072f4478d684cbcab1
- SHA1
  
  dfecc74718f3636d382fabdadf6f85ec000bc715
- SHA256
  
  f04bda4839e0e23480ff96288086cfba799b958d5478161299fdfaebab902f18
- SHA512
  
  b0df7afa8641b6a9bdcb24fbcc81b01f8b826d2fb72eca5b4e86a96cc50f2d172323a3ffb2c3c82dcda57c9bc96271ed1e93ed1b736e33a756ce76784cf391f9
- SSDEEP
  
  768:/GklvetkSuW2UY2F+lUQXarWYw2ssUZZXVy0alOIH:/GiqkSGOF+lUTWYsy0aOIH
Score

8^/10

discovery exploit persistence
- Possible privilege escalation attempt
  exploit
- Modifies file permissions
  discovery
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexploitpersistence

behavioral2

discoveryexploitpersistence