General
- Target 9ed9d88f345979184ab194e55fab212968967ed98fe6d54280c3c1437fc0f820
- Size 11.6MB
- Sample260724-ldm64awvcs
- SHA256 9ed9d88f345979184ab194e55fab212968967ed98fe6d54280c3c1437fc0f820
Score
10/10
Malware Config
Targets
-
- Target leidianmoniqi8 (2)_7_23.msi
- Size 11.9MB
- SHA256 27ee2e92a515e104e53318a244d87989745ce29233d01f2592dd3681740f7b83
Score10/10-
UAC bypass
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Power Settings
powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
3Subvert Trust Controls
1Install Root Certificate
1