General
- Target UidBypass 1.4.exe
- Size 28.8MB
- Sample260705-wyncpsaw6r
- SHA256 b9abebc9cfb88a2ca58b30c43cac66fa28efaa73498857a5466869bd5683e05a
Score
10/10
Malware Config
Targets
-
- Target UidBypass 1.4.exe
- Size 28.8MB
- SHA256 b9abebc9cfb88a2ca58b30c43cac66fa28efaa73498857a5466869bd5683e05a
Score10/10-
Modifies firewall policy service
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
2Windows Service
2Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
2Windows Service
2Event Triggered Execution
1Netsh Helper DLL
1