C:\Users\Administrator\Desktop\ssploit\BypassUAC\obj\Release\CrackAdmin.pdb
General
-
Target
2024-04-27_b145f560e75e0cdb849d11b8d8b22983_lockbit
-
Size
488KB
-
MD5
b145f560e75e0cdb849d11b8d8b22983
-
SHA1
fb71d3e43a1df672a82e90cab1dc32e4b85ef8a2
-
SHA256
59897780e047eb76683123de7319a4e2a01c7e439915537cb9e0502e8aa7fe0b
-
SHA512
5851590bb9d410afba1ce4cc1ae99488a1331f1eea1cfdca0a5d52be4414697736e54409f40ac610fc388c06c648ec125671ade28fbb463916c4f0e0519ddcc2
-
SSDEEP
6144:4Wrba0YKR5BTkk8rqCBqjkK4szCKouimOAwMwXGCQ0ZdqtrnUusPAv:4W63KAbKzCNutwMw2kZd
Score
10/10
Malware Config
Signatures
-
Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003) 1 IoCs
-
Detects executables embedding command execution via IExecuteCommand COM object 1 IoCs
-
detects Windows exceutables potentially bypassing UAC using eventvwr.exe 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-04-27_b145f560e75e0cdb849d11b8d8b22983_lockbit
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections