General
- Target MandalaMEMZ.exe
- Size 99.8MB
- Sample260731-qpxbcsvsez
- SHA256 280c533bb161780a0297fee751244eb8322f76a3d03249e5ce1b5e4b1dc928d3
- MD5 491ca2c28a7bfa4cc51594effd633a77
- SHA1 adb5074c1c1a57e6e8509666b9dc084bf74c18d1
- SHA512 eee69082cde6f02b50500514aeb7236bf9bc7f8965b66f419c708b5f7e99b12a07aaf1dcafb6bdd8e10d9c84fe19ce060e22178ac40e13596c454a9281e2b856
- SSDEEP 3145728:QUXtgYRPSC++6y9zR3I5BB7tE0W8N4cmzm2vAQ:QU9xaC4y9zR3sjnW8NXwm2YQ
- TLSH T11D383310D95D569EE20A6B31E0D0DA1BBFC7308F87A681D816E449478B6B4CCEE7DC36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
MandalaMEMZ.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target MandalaMEMZ.exe
- Size 99.8MB
- SHA256 280c533bb161780a0297fee751244eb8322f76a3d03249e5ce1b5e4b1dc928d3
- MD5 491ca2c28a7bfa4cc51594effd633a77
- SHA1 adb5074c1c1a57e6e8509666b9dc084bf74c18d1
- SHA512 eee69082cde6f02b50500514aeb7236bf9bc7f8965b66f419c708b5f7e99b12a07aaf1dcafb6bdd8e10d9c84fe19ce060e22178ac40e13596c454a9281e2b856
- SSDEEP 3145728:QUXtgYRPSC++6y9zR3I5BB7tE0W8N4cmzm2vAQ:QU9xaC4y9zR3sjnW8NXwm2YQ
- TLSH T11D383310D95D569EE20A6B31E0D0DA1BBFC7308F87A681D816E449478B6B4CCEE7DC36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UAC bypass
-
Loads dropped DLL
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1