General
- Target 0.39.1.exe
- Size 2.5MB
- Sample260710-ae7fksaz9q
- SHA256 64a1a1c52c831d066384a0d9fe92297ce58f182b21ad00cc5fc071ff91306f33
- MD5 97da6f560c4c6ac0f3eaab6a553899a9
- SHA1 03fe05f597704abb0d4deb197599f3ea951a6aae
- SHA512 5fb6901778c52781018a876cdc7672e8cc95604cf544eeb21ebce2c9744db5e45cdec4793e0b4f8c79037f72e154da6623061db69510a46264d2cea02c06db5c
- SSDEEP 49152:bzf6V1jqp9ekTDpSxfHLqY+xKkmyLW5RhM0glJ:bzyV0p+fOtIFIlJ
- TLSH T1B9C5E122F3918837D55326345D4B93D86926BF201E2858877BE93E4CAF367C27839367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0.39.1.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
0.39.1.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 0.39.1.exe
- Size 2.5MB
- SHA256 64a1a1c52c831d066384a0d9fe92297ce58f182b21ad00cc5fc071ff91306f33
- MD5 97da6f560c4c6ac0f3eaab6a553899a9
- SHA1 03fe05f597704abb0d4deb197599f3ea951a6aae
- SHA512 5fb6901778c52781018a876cdc7672e8cc95604cf544eeb21ebce2c9744db5e45cdec4793e0b4f8c79037f72e154da6623061db69510a46264d2cea02c06db5c
- SSDEEP 49152:bzf6V1jqp9ekTDpSxfHLqY+xKkmyLW5RhM0glJ:bzyV0p+fOtIFIlJ
- TLSH T1B9C5E122F3918837D55326345D4B93D86926BF201E2858877BE93E4CAF367C27839367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UAC bypass
-
Event Triggered Execution: Image File Execution Options Injection
-
Adds Run key to start application
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Image File Execution Options Injection
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Image File Execution Options Injection
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
3