Overview

overview

10

Static

static

5

AutoClicker-3.1.exe

windows11-21h2-x64

Resubmissions

28/03/2025, 18:08

250328-wrc86azsdt 10

28/03/2025, 17:56

250328-wjglls1my2 5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    AutoClicker-3.1.exe

  • Size

    860KB

  • Sample

    250328-wrc86azsdt

  • MD5

    c208a15591828ac1b1c825f33fd55c8a

  • SHA1

    bea4a247ece1a749d0994fc085fbd2d7c90a21e7

  • SHA256

    a6ee6130d83bbe55e9dacdff2005950d69fc2d3c54e28467b82c148e274d90da

  • SHA512

    b78d8055fc64bac1cdd366cdb339df2e081228bd998fdb5450a6832b0720c1b321568aabd7535ce62c16067ad20c86e51712c3e78bc40945adc05c63565fd889

  • SSDEEP

    12288:2aWzgMg7v3qnCipErQohh0F4xCJ8lnydQEzFGZ3dRP6yWD:RaHMv6C1rjpnydQEOPdWD

Score
10/10
defense_evasiondiscoverypersistenceransomwaretrojan

Malware Config

Targets

    • Target

      AutoClicker-3.1.exe

    • Size

      860KB

    • MD5

      c208a15591828ac1b1c825f33fd55c8a

    • SHA1

      bea4a247ece1a749d0994fc085fbd2d7c90a21e7

    • SHA256

      a6ee6130d83bbe55e9dacdff2005950d69fc2d3c54e28467b82c148e274d90da

    • SHA512

      b78d8055fc64bac1cdd366cdb339df2e081228bd998fdb5450a6832b0720c1b321568aabd7535ce62c16067ad20c86e51712c3e78bc40945adc05c63565fd889

    • SSDEEP

      12288:2aWzgMg7v3qnCipErQohh0F4xCJ8lnydQEzFGZ3dRP6yWD:RaHMv6C1rjpnydQEOPdWD

    Score
    10/10
    defense_evasiondiscoverypersistenceransomwaretrojan
    behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

2
T1547

Winlogon Helper DLL

2
T1547.004

Privilege Escalation

Abuse Elevation Control Mechanism

1
T1548

Bypass User Account Control

1
T1548.002

Boot or Logon Autostart Execution

2
T1547

Winlogon Helper DLL

2
T1547.004

Defense Evasion

Abuse Elevation Control Mechanism

1
T1548

Bypass User Account Control

1
T1548.002

Impair Defenses

1
T1562

Disable or Modify Tools

1
T1562.001

Modify Registry

5
T1112

Subvert Trust Controls

1
T1553

SIP and Trust Provider Hijacking

1
T1553.003

Credential Access

Discovery

Browser Information Discovery

1
T1217

Query Registry

1
T1012

System Information Discovery

3
T1082

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Lateral Movement

Collection

Command and Control

Web Service

1
T1102

Exfiltration

Impact

Defacement

1
T1491

Tasks