General
- Target 0ad34d13fd6d8d1efab446e79f0edb787f422f33a37c67b69e1b8cced5bbe750
- Size 1.7MB
- Sample220415-td9n4abfe3
- SHA256 0ad34d13fd6d8d1efab446e79f0edb787f422f33a37c67b69e1b8cced5bbe750
Score
10/10
Malware Config
Targets
-
- Target 0ad34d13fd6d8d1efab446e79f0edb787f422f33a37c67b69e1b8cced5bbe750
- Size 1.7MB
- SHA256 0ad34d13fd6d8d1efab446e79f0edb787f422f33a37c67b69e1b8cced5bbe750
Score10/10UAC bypass
Windows security bypass
XpertRAT
XpertRAT is a remote access trojan with various capabilities.
Adds policy Run key to start application
Windows security modification
Adds Run key to start application
Checks whether UAC is enabled
Suspicious use of SetThreadContext