General
- Target tmpif5cpgg4.exe
- Size 80KB
- Sample260712-ttfe7aez8v
- SHA256 fdac69874bb9fda0ada0a1c24894698a3de0c265bb481e844797f41f812004c6
Score
10/10
Malware Config
Targets
-
- Target tmpif5cpgg4.exe
- Size 80KB
- SHA256 fdac69874bb9fda0ada0a1c24894698a3de0c265bb481e844797f41f812004c6
Score10/10-
Detects SentinelRAT payload
-
Family: SentinelRAT
SentinelRAT is a Windows remote access tool written in C#.
-
Modifies firewall policy service
-
UAC bypass
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1