General
- Target 9442bcc1f429af89162eaa7d9dca5115b9b46ecd775ddef52dd55c042ccd96d5
- Size 421KB
- Sample220511-c8yrmseac2
- SHA256 9442bcc1f429af89162eaa7d9dca5115b9b46ecd775ddef52dd55c042ccd96d5
Score
10/10
Malware Config
Targets
-
- Target 9442bcc1f429af89162eaa7d9dca5115b9b46ecd775ddef52dd55c042ccd96d5
- Size 421KB
- SHA256 9442bcc1f429af89162eaa7d9dca5115b9b46ecd775ddef52dd55c042ccd96d5
Score10/10UAC bypass
Windows security bypass
XpertRAT
XpertRAT is a remote access trojan with various capabilities.
Adds policy Run key to start application
Deletes itself
Windows security modification
Adds Run key to start application
Checks whether UAC is enabled
Suspicious use of SetThreadContext