General
- Target hopeless_v5.exe
- Size 96KB
- Sample260722-wax71a1ana
- SHA256 a3ed72cec6924d7fedb730c840dd8f34c4550348c2ca10027b988622a56c2b79
- MD5 32e498a3c7d32bee0b2d2160f681ab16
- SHA1 f98af3cf1fda4fbc519a69d39d66722c6026f71a
- SHA512 839736bb556b2a16faf6bb587528f20f019e7cde864fa1da89007898ca0d7556587e7d09f4b5852231d3e53e3e20946aee4aeb53bba12bcc6de5f714751e21f0
- SSDEEP 1536:g7yGeNS0VJXHS4T4NJrBUX8NDykwxLC+HkBZosCM6Ppm7oxfWK+Sm1p:greI0VVy04NJrBPIkwxLCMUt+pmAWK+3
- TLSH T1C3A3E706B2E335ECD77BC97889F7AA71AB31B8224821DF3E4650D5650C21E50EE35E36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
hopeless_v5.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
hopeless_v5.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target hopeless_v5.exe
- Size 96KB
- SHA256 a3ed72cec6924d7fedb730c840dd8f34c4550348c2ca10027b988622a56c2b79
- MD5 32e498a3c7d32bee0b2d2160f681ab16
- SHA1 f98af3cf1fda4fbc519a69d39d66722c6026f71a
- SHA512 839736bb556b2a16faf6bb587528f20f019e7cde864fa1da89007898ca0d7556587e7d09f4b5852231d3e53e3e20946aee4aeb53bba12bcc6de5f714751e21f0
- SSDEEP 1536:g7yGeNS0VJXHS4T4NJrBUX8NDykwxLC+HkBZosCM6Ppm7oxfWK+Sm1p:greI0VVy04NJrBPIkwxLCMUt+pmAWK+3
- TLSH T1C3A3E706B2E335ECD77BC97889F7AA71AB31B8224821DF3E4650D5650C21E50EE35E36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UAC bypass
-
Windows security modification
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
2Windows Service
2Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
4Disable or Modify Tools
4Modify Registry
5