dfdea2bd42d4e88414736e773c84d365b074219b79dc0248386dc23edf37aa68 | Triage

Sharing

General

Target

dfdea2bd42d4e88414736e773c84d365b074219b79dc0248386dc23edf37aa68
Size

56KB
Sample

221107-lz4qzadbek
MD5

0d2b38415941d62f462315f6ce8ca851
SHA1

826af20b72d2f40fbbb3cb4cf10a87dc948c18b1
SHA256

dfdea2bd42d4e88414736e773c84d365b074219b79dc0248386dc23edf37aa68
SHA512

c9d3efc0381131a274d08d678aae40d7a10c662b1ea45b7489ac9439bf1b58d6cc0740485cab9860065420ea93d986726ea12dc63101de033b76b12f604d524b
SSDEEP

1536:3STDBwjgBI0VoOba/969CkQuIrg3MBLqg2byk:3SNrVoOm/96skQuIrgMBOkk

Score

8^/10

discovery exploit

Malware Config

Targets

- Target
  
  dfdea2bd42d4e88414736e773c84d365b074219b79dc0248386dc23edf37aa68
- Size
  
  56KB
- MD5
  
  0d2b38415941d62f462315f6ce8ca851
- SHA1
  
  826af20b72d2f40fbbb3cb4cf10a87dc948c18b1
- SHA256
  
  dfdea2bd42d4e88414736e773c84d365b074219b79dc0248386dc23edf37aa68
- SHA512
  
  c9d3efc0381131a274d08d678aae40d7a10c662b1ea45b7489ac9439bf1b58d6cc0740485cab9860065420ea93d986726ea12dc63101de033b76b12f604d524b
- SSDEEP
  
  1536:3STDBwjgBI0VoOba/969CkQuIrg3MBLqg2byk:3SNrVoOm/96skQuIrgMBOkk
Score

8^/10

discovery exploit
- Possible privilege escalation attempt
  exploit
- Modifies file permissions
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexploit

behavioral2

discoveryexploit