General
- Target YT3VM.exe
- Size 520KB
- Sample260730-mn6a4afh87
- SHA256 fe77628999644775e58cef56fd9ec651ab6e01e5dcba457eabcc213364284258
- MD5 11adfb2127dc0b2e427f6247e0bd3b06
- SHA1 5e1a55d1c266fa7932be8dd29ca2ed65bf3e6e4c
- SHA512 f753717146cc19a162f621dffb3bd74b80f1aa1e989ed5ea10a6451e4063f2e3a7ce150298eebd810236e8b965dd0971148a14c292454cb38b9cece9fd4f7fde
- SSDEEP 12288:nB46AfWZLtV4zjrbn/DvUNtq7rneKTQ0gJWdRU938c:B8fmGzj/Dvf7auK2U938c
- TLSH T177B4D012F6C40451EDAE063B98B38E14C7B0B5DEEE2747CE27DAA86462F334446653F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
YT3VM.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target YT3VM.exe
- Size 520KB
- SHA256 fe77628999644775e58cef56fd9ec651ab6e01e5dcba457eabcc213364284258
- MD5 11adfb2127dc0b2e427f6247e0bd3b06
- SHA1 5e1a55d1c266fa7932be8dd29ca2ed65bf3e6e4c
- SHA512 f753717146cc19a162f621dffb3bd74b80f1aa1e989ed5ea10a6451e4063f2e3a7ce150298eebd810236e8b965dd0971148a14c292454cb38b9cece9fd4f7fde
- SSDEEP 12288:nB46AfWZLtV4zjrbn/DvUNtq7rneKTQ0gJWdRU938c:B8fmGzj/Dvf7auK2U938c
- TLSH T177B4D012F6C40451EDAE063B98B38E14C7B0B5DEEE2747CE27DAA86462F334446653F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UAC bypass
-
Executes dropped EXE
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Winlogon Helper DLL
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
3