General
- Target 4108024237005e6f1f50002d277c7c377a20b24d0146ab88ae22430f184b78c0.dll
- Size 7.4MB
- Sample260706-ha2crsaz3s
- SHA256 4108024237005e6f1f50002d277c7c377a20b24d0146ab88ae22430f184b78c0
- MD5 d36b9c20f66a7fe493c5352761875b67
- SHA1 c954d29525a88df79a916dd3529c0679b916c86b
- SHA512 ed598523e27c5ddd5655db8f85ed7c45d51dc92b2ee2584bd5b0c7354e6d7e2e29fe3e48a59bfbb6ef6e09b4fa807cafc43626aa4000a195ccb3a8adbafb3d03
- SSDEEP 196608:mp8PQqubH0V1lj26wg93IvQGOpmC5OVq1P6SQBSeZ4:mp82clq6wieQFYrMe2
- TLSH T1A7763386E8A8443FCC5D79BF59327BEA91FC0F2526169C5B5A4037E22436531B88F43B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
4108024237005e6f1f50002d277c7c377a20b24d0146ab88ae22430f184b78c0.dll
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
4108024237005e6f1f50002d277c7c377a20b24d0146ab88ae22430f184b78c0.dll
Resource
win11ltsc2024-20260629-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 4108024237005e6f1f50002d277c7c377a20b24d0146ab88ae22430f184b78c0.dll
- Size 7.4MB
- SHA256 4108024237005e6f1f50002d277c7c377a20b24d0146ab88ae22430f184b78c0
- MD5 d36b9c20f66a7fe493c5352761875b67
- SHA1 c954d29525a88df79a916dd3529c0679b916c86b
- SHA512 ed598523e27c5ddd5655db8f85ed7c45d51dc92b2ee2584bd5b0c7354e6d7e2e29fe3e48a59bfbb6ef6e09b4fa807cafc43626aa4000a195ccb3a8adbafb3d03
- SSDEEP 196608:mp8PQqubH0V1lj26wg93IvQGOpmC5OVq1P6SQBSeZ4:mp82clq6wieQFYrMe2
- TLSH T1A7763386E8A8443FCC5D79BF59327BEA91FC0F2526169C5B5A4037E22436531B88F43B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UAC bypass
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
3