General
- Target GRoupALEst5bariya.exe
- Size 764KB
- Sample260701-v6h8aacz41
- SHA256 e093af45758904aa62df6e4b57ee016464da404c8465675db12daff4e4a60ffb
Score
10/10
Malware Config
Targets
-
- Target GRoupALEst5bariya.exe
- Size 764KB
- SHA256 e093af45758904aa62df6e4b57ee016464da404c8465675db12daff4e4a60ffb
Score10/10-
Modifies Windows Defender DisableAntiSpyware settings
-
Modifies Windows Defender TamperProtection settings
-
UAC bypass
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
2Windows Service
2