General
- Target 28d10ed6_.zip
- Size 32.4MB
- Sample260703-e7znnabv4z
- SHA256 d0f6ff7cc827359d435e6450a1ffaf54720975d46ba3a5c568856e131179a8ac
Score
10/10
Malware Config
Targets
-
- Target libtcmalloc_minimal.dll
- Size 32.3MB
- SHA256 760bfe0b357f2a8b7e2d871c0aebdc3b1748087444203e129c82da12a2543b06
Score10/10-
UAC bypass
-
Executes dropped EXE
-
Loads dropped DLL
-
VMProtect packed file
Detects executables packed with VMProtect commercial packer.
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
- Target 樱桃播放器.exe
- Size 1.4MB
- SHA256 d62f68ac002ae90a2b7dcb154ff4cce3a05171a6714028c4b8eb3094e4520c4a
Score10/10-
UAC bypass
-
VMProtect packed file
Detects executables packed with VMProtect commercial packer.
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
3