General
- Target c241d491c69fd45e4e1f05cfb3087adabcf196666496465e9ebba2b96b38f07c
- Size 6.7MB
- Sample260804-2bc64sfj3v
- SHA256 c241d491c69fd45e4e1f05cfb3087adabcf196666496465e9ebba2b96b38f07c
Score
10/10
Malware Config
Targets
-
- Target c241d491c69fd45e4e1f05cfb3087adabcf196666496465e9ebba2b96b38f07c
- Size 6.7MB
- SHA256 c241d491c69fd45e4e1f05cfb3087adabcf196666496465e9ebba2b96b38f07c
Score10/10-
UAC bypass
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Drops file in System32 directory
-
Executes a VBScript file via the Windows Script Host.
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
3Subvert Trust Controls
1Install Root Certificate
1