General
- Target HollowKnight.exe
- Size 398KB
- Sample260815-ewav6ayepa
- SHA256 8e649261e73e3c9a0a0dc9d245b76a631d39a44ea8a70195ace2e8a1b6103df5
- MD5 1f7ae217a85abf6806f7d601e53a98b1
- SHA1 4b5323eef554e916628dfcf297b974e32b057fbd
- SHA512 50b8723238662a3f6fdbca80b5a38a197c2189674f7e6f9600a5c025481a156634bf2817f915deb22185e1afd86ef012de6f6f8e1ec61bac1f9ef91c4c18dcef
- SSDEEP 6144:oV28oT+tJTSmbInFpdNOoSyAmwF77v+ZvWxBouvkOuLYc1qFzq+AjshCzEHcYJ:oohRooFpdNOoSyA7NgOuLn+TFy
- TLSH T11194BE2A4ECDD94BC2956FB91AF1F27C91BD87C03C1A8203DD6429A9FE38E9D7D05184
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
HollowKnight.exe
Resource
win11-20260513-en
12 signatures
900 seconds
Malware Config
Targets
-
- Target HollowKnight.exe
- Size 398KB
- SHA256 8e649261e73e3c9a0a0dc9d245b76a631d39a44ea8a70195ace2e8a1b6103df5
- MD5 1f7ae217a85abf6806f7d601e53a98b1
- SHA1 4b5323eef554e916628dfcf297b974e32b057fbd
- SHA512 50b8723238662a3f6fdbca80b5a38a197c2189674f7e6f9600a5c025481a156634bf2817f915deb22185e1afd86ef012de6f6f8e1ec61bac1f9ef91c4c18dcef
- SSDEEP 6144:oV28oT+tJTSmbInFpdNOoSyAmwF77v+ZvWxBouvkOuLYc1qFzq+AjshCzEHcYJ:oohRooFpdNOoSyA7NgOuLn+TFy
- TLSH T11194BE2A4ECDD94BC2956FB91AF1F27C91BD87C03C1A8203DD6429A9FE38E9D7D05184
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UAC bypass
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Event Triggered Execution: Image File Execution Options Injection
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Event Triggered Execution
1Image File Execution Options Injection
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
1