General
- Target SOCIAL CREDIT TEST.exe
- Size 19.7MB
- Sample260808-brplzazwgs
- SHA256 5699b2e12f78b7eeca0633c6a5a93effe7187565eccd7668acccf93c61ab7acb
- MD5 80c506da3df5e4580c06c48162bccbea
- SHA1 43fbccf50f91cd8e1190869b0edc96d920519c14
- SHA512 f4a424bf758bb48da944701397ac1e82bb72a15ea4e8818535f2e52199d37e9caf4361303fee4bd9d6db528e1c0171d1612aebc5f636ca9c4ee4fd795432b8c5
- SSDEEP 393216:AZwsO1LNrFRdcQ87fxa3JxLCQi2LXe+FRdcQ87fxa3JmZRNIcgi:8O1xrFRdT8zaJp9Py+FRdT8zaJUaDi
- TLSH T146271213F383E51EE8415E374D8199C46A71B48CAE23531F3254CF6E9EBB341AE8A761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
SOCIAL CREDIT TEST.exe
Resource
win11ltsc2024-20260709-es
Malware Config
Targets
-
- Target SOCIAL CREDIT TEST.exe
- Size 19.7MB
- SHA256 5699b2e12f78b7eeca0633c6a5a93effe7187565eccd7668acccf93c61ab7acb
- MD5 80c506da3df5e4580c06c48162bccbea
- SHA1 43fbccf50f91cd8e1190869b0edc96d920519c14
- SHA512 f4a424bf758bb48da944701397ac1e82bb72a15ea4e8818535f2e52199d37e9caf4361303fee4bd9d6db528e1c0171d1612aebc5f636ca9c4ee4fd795432b8c5
- SSDEEP 393216:AZwsO1LNrFRdcQ87fxa3JxLCQi2LXe+FRdcQ87fxa3JmZRNIcgi:8O1xrFRdT8zaJp9Py+FRdT8zaJUaDi
- TLSH T146271213F383E51EE8415E374D8199C46A71B48CAE23531F3254CF6E9EBB341AE8A761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UAC bypass
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
4