General
- Target 7d7ee943_.zip
- Size 32.4MB
- Sample260704-hm3flagt3p
- SHA256 71b1cca780bc6e37c2d1ab6b17bb259eb2064b9fd55c940089e054868c14b4d1
Score
10/10
Malware Config
Targets
-
- Target libtcmalloc_minimal.dll
- Size 32.3MB
- SHA256 760bfe0b357f2a8b7e2d871c0aebdc3b1748087444203e129c82da12a2543b06
Score10/10-
UAC bypass
-
Executes dropped EXE
-
Loads dropped DLL
-
VMProtect packed file
Detects executables packed with VMProtect commercial packer.
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
- Target 樱桃播放器.exe
- Size 1.4MB
- SHA256 d62f68ac002ae90a2b7dcb154ff4cce3a05171a6714028c4b8eb3094e4520c4a
Score10/10-
UAC bypass
-
VMProtect packed file
Detects executables packed with VMProtect commercial packer.
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
3