General
- Target payload.exe
- Size 2.8MB
- Sample260723-1wbcksdd33
- SHA256 0fc9554c888be9681068be12cc95f6eab004774db146d6be9ea5ba947859fbbc
- MD5 977b51b8ffd0d68109a08540832d306e
- SHA1 f0a6f082d912d697d0fb30f80e71d4ceb95a0f43
- SHA512 ac6ab542246cf19c976c9fa9e640f632c0c4a1986776c4d09f517308de0f5d634820c67151cb98214b2dd2cca310ef07d2fc9d8f0c31bde5566accafee27070f
- SSDEEP 24576:5UGiceHfAp+AXD1QVqw2C0NFmtXD/kxZwC11Z3I+af2J6clMi81s3AXJGxxV5:iGxeHf2+AXD1QV/F0NFGkw+5yJGxxV5
- TLSH T179D51A4369DB0DE9C9D6B7B4A2935335A734FC758B296E3AA90CC2315D536C0AD2FB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
payload.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target payload.exe
- Size 2.8MB
- SHA256 0fc9554c888be9681068be12cc95f6eab004774db146d6be9ea5ba947859fbbc
- MD5 977b51b8ffd0d68109a08540832d306e
- SHA1 f0a6f082d912d697d0fb30f80e71d4ceb95a0f43
- SHA512 ac6ab542246cf19c976c9fa9e640f632c0c4a1986776c4d09f517308de0f5d634820c67151cb98214b2dd2cca310ef07d2fc9d8f0c31bde5566accafee27070f
- SSDEEP 24576:5UGiceHfAp+AXD1QVqw2C0NFmtXD/kxZwC11Z3I+af2J6clMi81s3AXJGxxV5:iGxeHf2+AXD1QV/F0NFGkw+5yJGxxV5
- TLSH T179D51A4369DB0DE9C9D6B7B4A2935335A734FC758B296E3AA90CC2315D536C0AD2FB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies Windows Defender Real-time Protection settings
-
UAC bypass
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
2Windows Service
2Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
3Disable or Modify Tools
3Modify Registry
4