General
- Target PulseVisual.exe
- Size 2.5MB
- Sample260807-tsfpkasscw
- SHA256 a7bf6ec767498573fcdf46f8f1e842aeb92860de897ec2295e9ddf7491b4be67
- MD5 e212b54f989d1440efa52e24791969a7
- SHA1 d91fc2aab9393ec62bbce312ab00ad2e1c6b971f
- SHA512 a49598748db7a97617b7d4b0abd9b2b3af4559e21a1f875141b95f09badaab3b191fcf2ee7bfcd4687fd6f47212645c66c84dc0f974857ea9ae4dde72e050042
- SSDEEP 49152:rzf6V1jqp9ekTDiSxfHLqY+xKkmyLW5RhM0glI:rzyV0pXfOtIFIlI
- TLSH T19EC5E122F3918837D55326345D4B93D86926BF201E2858877BE93E4CAF367C27839367
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
PulseVisual.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
PulseVisual.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target PulseVisual.exe
- Size 2.5MB
- SHA256 a7bf6ec767498573fcdf46f8f1e842aeb92860de897ec2295e9ddf7491b4be67
- MD5 e212b54f989d1440efa52e24791969a7
- SHA1 d91fc2aab9393ec62bbce312ab00ad2e1c6b971f
- SHA512 a49598748db7a97617b7d4b0abd9b2b3af4559e21a1f875141b95f09badaab3b191fcf2ee7bfcd4687fd6f47212645c66c84dc0f974857ea9ae4dde72e050042
- SSDEEP 49152:rzf6V1jqp9ekTDiSxfHLqY+xKkmyLW5RhM0glI:rzyV0pXfOtIFIlI
- TLSH T19EC5E122F3918837D55326345D4B93D86926BF201E2858877BE93E4CAF367C27839367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UAC bypass
-
Event Triggered Execution: Image File Execution Options Injection
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Image File Execution Options Injection
1Pre-OS Boot
1Bootkit
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Image File Execution Options Injection
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
3Pre-OS Boot
1Bootkit
1