b96d8ce3c57cd4882ea75c04d20c1ac7e0792b553c61188ea8c955bc97572ac3 | Triage

Sharing

General

Target

b96d8ce3c57cd4882ea75c04d20c1ac7e0792b553c61188ea8c955bc97572ac3
Size

36KB
Sample

221107-mzdefscdg5
MD5

08282aa746414124f37ed4887f5fbd86
SHA1

eb20a16550a6b816f058103be555f695a546a908
SHA256

b96d8ce3c57cd4882ea75c04d20c1ac7e0792b553c61188ea8c955bc97572ac3
SHA512

f24f1391e52bc76eab535391b17dfb63eb9bd8858b33bcb0ff114b0db583ac5b8139acd65d8761b99d54255d9fc1287acda683708d2af539a5be4bf65b68649f
SSDEEP

384:/TnZytCPvOQoIbxc2rXwv75ZVrUB4mPKNsrlk/FaIXumjKb/fcUssDRQsY54MHu:/1ytcvOQoIXgDlu3PKNsyMIem02sp0u

Score

8^/10

discovery exploit persistence

Malware Config

Targets

- Target
  
  b96d8ce3c57cd4882ea75c04d20c1ac7e0792b553c61188ea8c955bc97572ac3
- Size
  
  36KB
- MD5
  
  08282aa746414124f37ed4887f5fbd86
- SHA1
  
  eb20a16550a6b816f058103be555f695a546a908
- SHA256
  
  b96d8ce3c57cd4882ea75c04d20c1ac7e0792b553c61188ea8c955bc97572ac3
- SHA512
  
  f24f1391e52bc76eab535391b17dfb63eb9bd8858b33bcb0ff114b0db583ac5b8139acd65d8761b99d54255d9fc1287acda683708d2af539a5be4bf65b68649f
- SSDEEP
  
  384:/TnZytCPvOQoIbxc2rXwv75ZVrUB4mPKNsrlk/FaIXumjKb/fcUssDRQsY54MHu:/1ytcvOQoIXgDlu3PKNsyMIem02sp0u
Score

8^/10

discovery exploit persistence
- Possible privilege escalation attempt
  exploit
- Modifies file permissions
  discovery
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexploitpersistence

behavioral2

discoveryexploitpersistence