General
- Target elevate.exe
- Size 2.7MB
- Sample260724-znevcsshjc
- SHA256 2881d369b4cd4363922f385744c5fd0caaad7c557b69875bb202dda3d67ed50a
- MD5 50e9d018309926dbb2114af62545b58a
- SHA1 43078a590b2362233571e5dd75d9a5f980dc3649
- SHA512 3cc2f135cc90cf29bfc1ebbe594dff5c0319e937b6e6aa926b61f493c12f0092e57393353122b72fc08cea16a75803c7bca441cd767e3e7504958711804734e6
- SSDEEP 49152:o8ga9i7qO/odC9Lg5CANvJHHgYdKFGUgLQr:xgt7qO/odKELQGUgLQr
- TLSH T157D5194369DB0DE9C9D6B7B4A1935335A734FD358B296E3AA90CC2311D536C4AE2FB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
elevate.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target elevate.exe
- Size 2.7MB
- SHA256 2881d369b4cd4363922f385744c5fd0caaad7c557b69875bb202dda3d67ed50a
- MD5 50e9d018309926dbb2114af62545b58a
- SHA1 43078a590b2362233571e5dd75d9a5f980dc3649
- SHA512 3cc2f135cc90cf29bfc1ebbe594dff5c0319e937b6e6aa926b61f493c12f0092e57393353122b72fc08cea16a75803c7bca441cd767e3e7504958711804734e6
- SSDEEP 49152:o8ga9i7qO/odC9Lg5CANvJHHgYdKFGUgLQr:xgt7qO/odKELQGUgLQr
- TLSH T157D5194369DB0DE9C9D6B7B4A1935335A734FD358B296E3AA90CC2311D536C4AE2FB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies Windows Defender Real-time Protection settings
-
UAC bypass
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
2Disable or Modify Tools
2Modify Registry
3