General
- Target payload.exe
- Size 2.8MB
- Sample260723-2ablwsyaka
- SHA256 6af12948b6d5b45b1f1425d26908ee768a53118c9d15467fa4f288c169a147aa
- MD5 c49cd8dca5ad45d8e1e564311e7cf658
- SHA1 5a79df46be83f60198e3ee1d4ef9761ac83ca294
- SHA512 43d640c1cc4071acdc75ab8399723945f8b194c6b92138815455d1fbc536a142ed8509a068ef921b8e6db524256cedba4d59352a50d30cb7862636cb5de0e466
- SSDEEP 24576:XWdO9mhZpFuQnTFjZRyXiflmtnTMxLq+FCn2PJ6clMi81s3AXEqbcwD:mdomhZ3uQnTFjnyyfltUH2kEqbcwD
- TLSH T1D1D5194369DB0DE9C9D6B7B4A2D35335A734FC758B296E3A990CC2315D536C0AE2BB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
payload.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target payload.exe
- Size 2.8MB
- SHA256 6af12948b6d5b45b1f1425d26908ee768a53118c9d15467fa4f288c169a147aa
- MD5 c49cd8dca5ad45d8e1e564311e7cf658
- SHA1 5a79df46be83f60198e3ee1d4ef9761ac83ca294
- SHA512 43d640c1cc4071acdc75ab8399723945f8b194c6b92138815455d1fbc536a142ed8509a068ef921b8e6db524256cedba4d59352a50d30cb7862636cb5de0e466
- SSDEEP 24576:XWdO9mhZpFuQnTFjZRyXiflmtnTMxLq+FCn2PJ6clMi81s3AXEqbcwD:mdomhZ3uQnTFjnyyfltUH2kEqbcwD
- TLSH T1D1D5194369DB0DE9C9D6B7B4A2D35335A734FC758B296E3A990CC2315D536C0AE2BB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies Windows Defender Real-time Protection settings
-
UAC bypass
-
Checks whether UAC is enabled
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
2Windows Service
2