General
- Target playit-windows-x86_64-signed.exe
- Size 4.3MB
- Sample240915-vpzhyaterc
- SHA256 2092f547f0d571672224787220b5601e182ccec6710ed18056da4df45ddf7d75
Score
10/10
Malware Config
Targets
-
- Target playit-windows-x86_64-signed.exe
- Size 4.3MB
- SHA256 2092f547f0d571672224787220b5601e182ccec6710ed18056da4df45ddf7d75
Score10/10-
UAC bypass
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Legitimate hosting services abused for malware hosting/C2
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
2Subvert Trust Controls
1SIP and Trust Provider Hijacking
1