General
- Target sample
- Size 380KB
- Sample260814-w2s3csbc58
- SHA256 90a2dd360c4f32579eb13f052fd798dc917dea8f590f8b63835a28f9a52f6dae
Score
10/10
Malware Config
Targets
-
- Target sample
- Size 380KB
- SHA256 90a2dd360c4f32579eb13f052fd798dc917dea8f590f8b63835a28f9a52f6dae
Score10/10-
Modifies Windows Defender DisableAntiSpyware settings
-
Modifies Windows Defender TamperProtection settings
-
UAC bypass
-
Windows security bypass
-
Executes dropped EXE
-
Windows security modification
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
2Windows Service
2Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
5Disable or Modify Tools
5Modify Registry
6