ff5f1b30f739e7a6f0debcc3d8069efef1beedab53f722274d5abf7f104977eb

Analysis

max time kernel
123s
max time network
134s
platform
windows10-2004_x64
resource
win10v2004-20231020-en
resource tags

arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
submitted
24/11/2023, 12:42

Target

icacls.exe
Size

56KB
MD5

49753afe55ade6d20e416f0dc3de6b91
SHA1

63e6d38934ff3be11189bad70ef73cbcbb65dfce
SHA256

ff5f1b30f739e7a6f0debcc3d8069efef1beedab53f722274d5abf7f104977eb
SHA512

cba061964f0f8302ddfa54fd0dd879a12cb7c4cef0126da9a6116abaa5e4aae2362be489e10827ea64c341e9d4b28e9f0a392a56bcf68897c993f26c4d277d5b
SSDEEP

768:7KMyBoCo+I3m1REGR2hopj+mEZgHEqzVQOctxzexQwHMwKOf:7ZObI3m1REG5dTlctd3wHMef

Score

7^/10

discovery

Modifies file permissions 1 TTPs 1 IoCs

discovery

File and Directory Permissions Modification

pid	Process
1508	icacls.exe

C:\Users\Admin\AppData\Local\Temp\icacls.exe
"C:\Users\Admin\AppData\Local\Temp\icacls.exe"
1⤵
- Modifies file permissions
PID:1508

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact