da202ab45c682d0b450e212a6287dfe24cad6b94407a28ea8428e490cf38f1a0 | Triage

Submit
Reports

Overview

overview

8

Static

static

3

rwifoujn.t...ng.exe

windows10-2004-x64

8

Sharing

General

Target

rwifoujn.txt.exe.png.exe
Size

9.9MB
Sample

240512-qdqdnsga4w
MD5

dd7ad7b8709ab183459f0294dc46775d
SHA1

37531f34181357f059cd2ae54ecb34730c28c2eb
SHA256

da202ab45c682d0b450e212a6287dfe24cad6b94407a28ea8428e490cf38f1a0
SHA512

56bbfec92e6e7814cc35368e24f436320bbdeabe7bfe88e2ee321790296c1351d28ed0f1a16d16d4bce6d5fd40d47edd784b1a8d6e2c997df0f02e2fca64e4f4
SSDEEP

196608:QsmWA1HeT39IigleE9TFa0Z8DOjCdylhY8gh70W8/LeoCZownzbQW77x:e1+TtIiHY9Z8D8CclyhCW8SaUn1x

Score

8^/10

discovery exploit pyinstaller

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

rwifoujn.txt.exe.png.exe

Resource

win10v2004-20240426-en

discovery exploit

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  rwifoujn.txt.exe.png.exe
- Size
  
  9.9MB
- MD5
  
  dd7ad7b8709ab183459f0294dc46775d
- SHA1
  
  37531f34181357f059cd2ae54ecb34730c28c2eb
- SHA256
  
  da202ab45c682d0b450e212a6287dfe24cad6b94407a28ea8428e490cf38f1a0
- SHA512
  
  56bbfec92e6e7814cc35368e24f436320bbdeabe7bfe88e2ee321790296c1351d28ed0f1a16d16d4bce6d5fd40d47edd784b1a8d6e2c997df0f02e2fca64e4f4
- SSDEEP
  
  196608:QsmWA1HeT39IigleE9TFa0Z8DOjCdylhY8gh70W8/LeoCZownzbQW77x:e1+TtIiHY9Z8D8CclyhCW8SaUn1x
Score

8^/10

discovery exploit
- Possible privilege escalation attempt
  exploit
- Loads dropped DLL
- Modifies file permissions
  discovery
behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

discoveryexploit

© 2018-2024

Terms | Privacy