General
- Target be8ed1ed8a1d903c9f9d58d44f4fa4076aee7ea08e317acc3e94e8962105d0b5
- Size 2.5MB
- Sample240604-cswmcaaa91
- SHA256 be8ed1ed8a1d903c9f9d58d44f4fa4076aee7ea08e317acc3e94e8962105d0b5
Score
10/10
Malware Config
Targets
-
- Target be8ed1ed8a1d903c9f9d58d44f4fa4076aee7ea08e317acc3e94e8962105d0b5
- Size 2.5MB
- SHA256 be8ed1ed8a1d903c9f9d58d44f4fa4076aee7ea08e317acc3e94e8962105d0b5
Score10/10-
UAC bypass
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1