General
- Target AZFcr
- Size 46KB
- Sample260703-vtq3csc131
- SHA256 2591dd9832b142818702371fcdd9638837fdffdc9eeabb5731dd215b8f2d1629
- MD5 5add94df044e8889625b933d15fe245b
- SHA1 b05a36a936bf76f0c816b417f523e2f3d2b52c9f
- SHA512 615120afe25ef929ec897fdc20db02644222bd6bcc1726f9cd2cabfc98908b57141da86efb12211af9b247e60e18247f754d451d24a8deabbc953cb9efb743a9
- SSDEEP 384:OWAn2uL6dYewyMVYdZ8KU0wMnTY8n9jrn24nz6BTnunbiVAvDRRTSNg:OWT3dYewSdZ7wyYSjyo6B4iVArRcW
- TLSH T13E239733C410EE4641A1EE56A2789B04D6B1D97748ED6414B60C4E4D0FCA9EA3AFFF4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
AZFcr.html
Resource
win10v2004-20260513-en
21 signatures
300 seconds
Behavioral task
behavioral2
Sample
AZFcr.html
Resource
win11ltsc2024-20260629-en
12 signatures
300 seconds
Malware Config
Targets
-
- Target AZFcr
- Size 46KB
- SHA256 2591dd9832b142818702371fcdd9638837fdffdc9eeabb5731dd215b8f2d1629
- MD5 5add94df044e8889625b933d15fe245b
- SHA1 b05a36a936bf76f0c816b417f523e2f3d2b52c9f
- SHA512 615120afe25ef929ec897fdc20db02644222bd6bcc1726f9cd2cabfc98908b57141da86efb12211af9b247e60e18247f754d451d24a8deabbc953cb9efb743a9
- SSDEEP 384:OWAn2uL6dYewyMVYdZ8KU0wMnTY8n9jrn24nz6BTnunbiVAvDRRTSNg:OWT3dYewSdZ7wyYSjyo6B4iVArRcW
- TLSH T13E239733C410EE4641A1EE56A2789B04D6B1D97748ED6414B60C4E4D0FCA9EA3AFFF4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UAC bypass
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
3Subvert Trust Controls
1Install Root Certificate
1