General
- Target Update.exe
- Size 1.5MB
- Sample260706-v35bcaas9w
- SHA256 27f036243d1f3aa7f8a853b339eb8864baac2231ad296a51f4ac85f4605b4340
- MD5 56f2d1bfefc81aaec13cd78a6b575c04
- SHA1 a9be994005dfd93f2cb5ebb34dfe09895ce07b45
- SHA512 f3eda1239100d9555920fb7b6325a94f83574d79040f8ba6b3d9c802583fbadd378b404f1ff71f8e4985c229d2b1bf7fb52c8f1246e5268f35afd4b72756077c
- SSDEEP 24576:QBJkrlr7AiOlwOpJeYOdTNK9RgIM/aR9Gl7MRH5:QBJkAlwO/X9GlmZ
- TLSH T1D4753911B7E88A2BE4AE57BAB071016547F3E5866376F78F6A4CA1781FD37804C02367
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Update.exe
Resource
win10ltsc2021-20260513-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target Update.exe
- Size 1.5MB
- SHA256 27f036243d1f3aa7f8a853b339eb8864baac2231ad296a51f4ac85f4605b4340
- MD5 56f2d1bfefc81aaec13cd78a6b575c04
- SHA1 a9be994005dfd93f2cb5ebb34dfe09895ce07b45
- SHA512 f3eda1239100d9555920fb7b6325a94f83574d79040f8ba6b3d9c802583fbadd378b404f1ff71f8e4985c229d2b1bf7fb52c8f1246e5268f35afd4b72756077c
- SSDEEP 24576:QBJkrlr7AiOlwOpJeYOdTNK9RgIM/aR9Gl7MRH5:QBJkAlwO/X9GlmZ
- TLSH T1D4753911B7E88A2BE4AE57BAB071016547F3E5866376F78F6A4CA1781FD37804C02367
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UAC bypass
-
Disables RegEdit via registry modification
-
Drops desktop.ini file(s)
-
Modifies WinLogon for persistence
-
Sets desktop wallpaper using registry
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Winlogon Helper DLL
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
3