General
- Target libtcmalloc_minimal.dll
- Size 32.0MB
- Sample260702-nf3exae18n
- SHA256 5bf43d8043349d06589a1a2e03842428429e0c3c173c883a7047c3e99d6b0fbe
- MD5 69c51ebc50486189c2a0a2fe755d6059
- SHA1 b82abf16828ec3be828ca62c56d43df4420fb379
- SHA512 61f20a43e2ea3f3ace4fb8d2380d8a8c257d3bbc8003fd78d769b10d4f87d3a0e00ea52357b71f16a0df5bd2526875a1befc9d8050abef90c166b00e08f34fe4
- SSDEEP 786432:kGhEw8qaOgj0H/3kWciMUfUdPn/KQBvOie6xy+ZvdIX4a:o3N0H/0ufUdPy+ON6cP
- TLSH T1A2773344C25D396CDAEA06BCC2BA339556C6BC1B51FA938872A937C75CFBB723101583
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
libtcmalloc_minimal.dll
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
libtcmalloc_minimal.dll
Resource
win11ltsc2024-20260630-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target libtcmalloc_minimal.dll
- Size 32.0MB
- SHA256 5bf43d8043349d06589a1a2e03842428429e0c3c173c883a7047c3e99d6b0fbe
- MD5 69c51ebc50486189c2a0a2fe755d6059
- SHA1 b82abf16828ec3be828ca62c56d43df4420fb379
- SHA512 61f20a43e2ea3f3ace4fb8d2380d8a8c257d3bbc8003fd78d769b10d4f87d3a0e00ea52357b71f16a0df5bd2526875a1befc9d8050abef90c166b00e08f34fe4
- SSDEEP 786432:kGhEw8qaOgj0H/3kWciMUfUdPn/KQBvOie6xy+ZvdIX4a:o3N0H/0ufUdPy+ON6cP
- TLSH T1A2773344C25D396CDAEA06BCC2BA339556C6BC1B51FA938872A937C75CFBB723101583
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UAC bypass
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
3