01476887bff645b770977d6ffb6c732a047d457eecd3497ca569ef29fc905787 | Triage

Sharing

General

Target

01476887bff645b770977d6ffb6c732a047d457eecd3497ca569ef29fc905787
Size

68KB
Sample

221107-rvgnjaeadm
MD5

0c55e9cc0009f4988fe82c3d56364ae1
SHA1

b30ab92cef12c6c6947df445dc8fdb046f785384
SHA256

01476887bff645b770977d6ffb6c732a047d457eecd3497ca569ef29fc905787
SHA512

dada2ffcf35cb29b6181dfb164b4316960c6fc6b58017ba8523ac2852f347aca78b629505a4a974b565c346adc3aa5094e432f618f062c1a4cea2e382062f454
SSDEEP

768:1l3pC6nCe+5tqup0pfXzXg4iOw/D2rRY1hv1Tl/ed45V4peiwRpRQkEps4qKgVwG:P5Hg1DyY1fTdtyezXQX3wCxfKeoKm

Score

8^/10

discovery exploit

Malware Config

Targets

- Target
  
  01476887bff645b770977d6ffb6c732a047d457eecd3497ca569ef29fc905787
- Size
  
  68KB
- MD5
  
  0c55e9cc0009f4988fe82c3d56364ae1
- SHA1
  
  b30ab92cef12c6c6947df445dc8fdb046f785384
- SHA256
  
  01476887bff645b770977d6ffb6c732a047d457eecd3497ca569ef29fc905787
- SHA512
  
  dada2ffcf35cb29b6181dfb164b4316960c6fc6b58017ba8523ac2852f347aca78b629505a4a974b565c346adc3aa5094e432f618f062c1a4cea2e382062f454
- SSDEEP
  
  768:1l3pC6nCe+5tqup0pfXzXg4iOw/D2rRY1hv1Tl/ed45V4peiwRpRQkEps4qKgVwG:P5Hg1DyY1fTdtyezXQX3wCxfKeoKm
Score

8^/10

discovery exploit
- Possible privilege escalation attempt
  exploit
- Modifies file permissions
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexploit

behavioral2

discoveryexploit