General
- Target e7ab0c483542652a8ba5df01c70148b7.exe
- Size 655KB
- Sample220302-d3mb4acff9
- SHA256 39feefb57167dd5ed9c900fa4b18aa815b955396ea3a298a5588bd9946d6a10d
Score
10/10
Malware Config
Targets
-
- Target e7ab0c483542652a8ba5df01c70148b7.exe
- Size 655KB
- SHA256 39feefb57167dd5ed9c900fa4b18aa815b955396ea3a298a5588bd9946d6a10d
Score10/10-
UAC bypass
-
Windows security bypass
-
XpertRAT
XpertRAT is a remote access trojan with various capabilities.
-
Adds policy Run key to start application
-
Windows security modification
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Suspicious use of SetThreadContext