General
- Target bd987b5298594a080d4947a0b2c7639cbb91947ea99f28922d8c1ae0e88a8a45
- Size 1.1MB
- Sample260703-l64pjsb16r
- SHA256 bd987b5298594a080d4947a0b2c7639cbb91947ea99f28922d8c1ae0e88a8a45
- MD5 6a89f77f290207ac82ba13b6d5c12e05
- SHA1 194aacbd7866e2c0717c7f6d23f8aeff918c47ea
- SHA512 ad879cabdb01e731c01ff136adc568ad47a83eaab007ff041af677335bd666f35dccd5ddf1b41573888a76767f8d72ba834553893abe101fafc27a88b481208b
- SSDEEP 24576:g1lC882NR2Lc/JlsZHs5OWkZo519UHXNZQsdNSq:mNRV/Jl4HAksWvzNX
- TLSH T15945E021FA16C43AD94E15747928CADA0A6D7A750BF4C8C3E7E45A7E1A330C32736E17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bd987b5298594a080d4947a0b2c7639cbb91947ea99f28922d8c1ae0e88a8a45.dll
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
bd987b5298594a080d4947a0b2c7639cbb91947ea99f28922d8c1ae0e88a8a45.dll
Resource
win11ltsc2024-20260629-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target bd987b5298594a080d4947a0b2c7639cbb91947ea99f28922d8c1ae0e88a8a45
- Size 1.1MB
- SHA256 bd987b5298594a080d4947a0b2c7639cbb91947ea99f28922d8c1ae0e88a8a45
- MD5 6a89f77f290207ac82ba13b6d5c12e05
- SHA1 194aacbd7866e2c0717c7f6d23f8aeff918c47ea
- SHA512 ad879cabdb01e731c01ff136adc568ad47a83eaab007ff041af677335bd666f35dccd5ddf1b41573888a76767f8d72ba834553893abe101fafc27a88b481208b
- SSDEEP 24576:g1lC882NR2Lc/JlsZHs5OWkZo519UHXNZQsdNSq:mNRV/Jl4HAksWvzNX
- TLSH T15945E021FA16C43AD94E15747928CADA0A6D7A750BF4C8C3E7E45A7E1A330C32736E17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UAC bypass
-
Drops startup file
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
2Disable or Modify Tools
2Modify Registry
3