General
- Target Neil.exe
- Size 10.7MB
- Sample260421-13xt6af12x
- SHA256 3343fbc83cf8b5b9074c5bd71b271d5a2033704e80c629049d3cc1118aa6e7a1
Score
10/10
Malware Config
Targets
-
- Target Neil.exe
- Size 10.7MB
- SHA256 3343fbc83cf8b5b9074c5bd71b271d5a2033704e80c629049d3cc1118aa6e7a1
Score10/10-
UAC bypass
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
2