Extracted

• • Target
    cbb5dc0559f662c3102a8e4d6ee622607cc638976a5ccb0b6dd8c6333723523a.bin
  • Size 152KB
  • SHA256 cbb5dc0559f662c3102a8e4d6ee622607cc638976a5ccb0b6dd8c6333723523a
  • MD5 dbd502ad685fa2b3077643a602ed65ff
  • SHA1 5628667f37ca1cc5bec73f2439af04c59a1fdc4e
  • SHA512 21d0b6b6d61dd252c8f26cf2ab1e927342d44cb59399c627c4a88c74b892460a1ed38f91af116d19f12d5cd8ca391c159bb6063845cd3f3265489faf4901a92c
  • SSDEEP 3072:ioseBSMNz4da7iqZjT2aTLPn83heZXD3TuM/9HWwNd:ioseLKda7iqZjTxTL8YZXD36M/9HlNd
  • TLSH
    T148E33A46FA808F13C4D61776BADF424533239BE4D3DB730699286FB43F8269E4E62905
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  7^/10

  credential_accessdefense_evasiondiscovery

  • File and Directory Permissions Modification

    Adversaries may modify file or directory permissions to evade defenses.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Reads process memory

    Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.

    credential_access
  behavioral1