General
- Target 25519936391.zip
- Size 5.5MB
- Sample260720-h2vdjact8y
- SHA256 e03eb0eb5fdac549b0996211b85f0c1ad02b4de90c5a71b2a5ee6e796914f375
Score
10/10
Malware Config
Targets
-
- Target 5f1c6059cbca3d1ba33c9834e845d290d8bfde3c4e0a37a71207b1a9b31593a7
- Size 5.5MB
- SHA256 5f1c6059cbca3d1ba33c9834e845d290d8bfde3c4e0a37a71207b1a9b31593a7
Score10/10-
UAC bypass
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Drops file in System32 directory
-
Executes a VBScript file via the Windows Script Host.
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
3Subvert Trust Controls
1Install Root Certificate
1