General
- Target YT3VM.exe
- Size 520KB
- Sample260730-ml8nfafh84
- SHA256 52864059b633ea53176ec1c9edea332926ed10191a660b205f9e9f0ff6fd310d
- MD5 8982e263664e08b74579b15c1d8c2b40
- SHA1 a9e72be6aeb9224aa33ff237c0a67a97c78647aa
- SHA512 2ef007f0bc43e07273633b8551906de6b37469b2e771787654d05920bb2351ae8b994b01f3f67c5cc7de1b2d4e89b85621302192fd8bb91a16e4bc7cf512dda4
- SSDEEP 12288:Wu1J6QrfWZLHV4zjrbn/DvUNtq7rneKTQ0gJWdRU938E:9mefqGzj/Dvf7auK2U938E
- TLSH T1DBB4D012F6C00551E8AE4A3B98B39E10C7F0B5DEEE1747CE27DA686462F370446A53F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
YT3VM.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target YT3VM.exe
- Size 520KB
- SHA256 52864059b633ea53176ec1c9edea332926ed10191a660b205f9e9f0ff6fd310d
- MD5 8982e263664e08b74579b15c1d8c2b40
- SHA1 a9e72be6aeb9224aa33ff237c0a67a97c78647aa
- SHA512 2ef007f0bc43e07273633b8551906de6b37469b2e771787654d05920bb2351ae8b994b01f3f67c5cc7de1b2d4e89b85621302192fd8bb91a16e4bc7cf512dda4
- SSDEEP 12288:Wu1J6QrfWZLHV4zjrbn/DvUNtq7rneKTQ0gJWdRU938E:9mefqGzj/Dvf7auK2U938E
- TLSH T1DBB4D012F6C00551E8AE4A3B98B39E10C7F0B5DEEE1747CE27DA686462F370446A53F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UAC bypass
-
Executes dropped EXE
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Winlogon Helper DLL
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
3