General
- Target payload.exe
- Size 2.8MB
- Sample260723-2d6answwgw
- SHA256 fc782553eedeb68cc11cd0373530eafc2914c785d984341e716bf433c6cfdabe
- MD5 71a1618a90840413df58d897c69c28a4
- SHA1 06082513f3c3c7f791f18ec343dd521720728b06
- SHA512 178a957656b0785c15e95c6d0a0abb794ffba04123fa36619860f8a9b408f2d5de5f7becb4d9ef4e0b5f52eb2b1abecbd741791bede042adf6265455c4d1c6a5
- SSDEEP 24576:fz8OHgiypjeuQnTFfVO1SpfSSktET3atxZ8n6kJ6clMi81s3AXE9+DmD:fIOAiypiuQnTFfQYpSSnUs61E9+DmD
- TLSH T1D6D51A4369DB0DE9C9D6BBB4A1935335A734FC758B396E3AA90CC2315D536C0AD2BB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
payload.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target payload.exe
- Size 2.8MB
- SHA256 fc782553eedeb68cc11cd0373530eafc2914c785d984341e716bf433c6cfdabe
- MD5 71a1618a90840413df58d897c69c28a4
- SHA1 06082513f3c3c7f791f18ec343dd521720728b06
- SHA512 178a957656b0785c15e95c6d0a0abb794ffba04123fa36619860f8a9b408f2d5de5f7becb4d9ef4e0b5f52eb2b1abecbd741791bede042adf6265455c4d1c6a5
- SSDEEP 24576:fz8OHgiypjeuQnTFfVO1SpfSSktET3atxZ8n6kJ6clMi81s3AXE9+DmD:fIOAiypiuQnTFfQYpSSnUs61E9+DmD
- TLSH T1D6D51A4369DB0DE9C9D6BBB4A1935335A734FC758B396E3AA90CC2315D536C0AD2BB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies Windows Defender Real-time Protection settings
-
UAC bypass
-
Checks whether UAC is enabled
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
2Windows Service
2