116a97b9f284905d011919d518f263d89550c257928044bda038f62f3965c2a7 | Triage

Sharing

General

Target

116a97b9f284905d011919d518f263d89550c257928044bda038f62f3965c2a7
Size

31KB
Sample

221107-rk7rzabbg9
MD5

05040dfe39ea468ef525df6c52c58e80
SHA1

f5dc32557c5c45e6bd66fb18d57e164f968908dc
SHA256

116a97b9f284905d011919d518f263d89550c257928044bda038f62f3965c2a7
SHA512

2c8d1db55689eb0e63dcc6c9d4e75df26644607bb5029d123afdbfb48ec1d34cc21ad40fcd43a52540fbff033f5e5037ea328a7025dff981ebd0880e4152b362
SSDEEP

768:tqku0P5K8KZLnR3JQCxNiwDaVQr1rDnpIOw3VzaM9o:tqku0P5zqTzrx0wGVQr1/Pwlz

Score

8^/10

discovery exploit

Malware Config

Targets

- Target
  
  116a97b9f284905d011919d518f263d89550c257928044bda038f62f3965c2a7
- Size
  
  31KB
- MD5
  
  05040dfe39ea468ef525df6c52c58e80
- SHA1
  
  f5dc32557c5c45e6bd66fb18d57e164f968908dc
- SHA256
  
  116a97b9f284905d011919d518f263d89550c257928044bda038f62f3965c2a7
- SHA512
  
  2c8d1db55689eb0e63dcc6c9d4e75df26644607bb5029d123afdbfb48ec1d34cc21ad40fcd43a52540fbff033f5e5037ea328a7025dff981ebd0880e4152b362
- SSDEEP
  
  768:tqku0P5K8KZLnR3JQCxNiwDaVQr1rDnpIOw3VzaM9o:tqku0P5zqTzrx0wGVQr1/Pwlz
Score

8^/10

discovery exploit
- Possible privilege escalation attempt
  exploit
- Deletes itself
- Modifies file permissions
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryexploit