General
- Target BlackEye.exe
- Size 2.5MB
- Sample260825-kr3chav1ds
- SHA256 7fcff23aa8b34afba36fc68fbb3703429e7c1e82ceaf010308d548b50d14dc18
- MD5 ccc7cc9da2d097f8179a41feac3d959f
- SHA1 a2a95f6681ac7b96e6ac51af663246e2d4ff34a6
- SHA512 f0365ed83c20c70a00e3ebdfd92d2fd41e32518a18b0a011d165872d122280787c6abb78001d8c8fd8bec54db31ce00bab212e012f2f3fd37b4481a62b608398
- SSDEEP 49152:Rzf6V1jqp9ekTD0SxfHLqY+xKkmyLW5RhM0glN:RzyV0pFfOtIFIlN
- TLSH T149C5E122F3918837D55325345D0BD3B46926BF201E2858877BE93E4EBF367827829367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BlackEye.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
BlackEye.exe
Resource
win11ltsc2024-20260710-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target BlackEye.exe
- Size 2.5MB
- SHA256 7fcff23aa8b34afba36fc68fbb3703429e7c1e82ceaf010308d548b50d14dc18
- MD5 ccc7cc9da2d097f8179a41feac3d959f
- SHA1 a2a95f6681ac7b96e6ac51af663246e2d4ff34a6
- SHA512 f0365ed83c20c70a00e3ebdfd92d2fd41e32518a18b0a011d165872d122280787c6abb78001d8c8fd8bec54db31ce00bab212e012f2f3fd37b4481a62b608398
- SSDEEP 49152:Rzf6V1jqp9ekTD0SxfHLqY+xKkmyLW5RhM0glN:RzyV0pFfOtIFIlN
- TLSH T149C5E122F3918837D55325345D0BD3B46926BF201E2858877BE93E4EBF367827829367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UAC bypass
-
Event Triggered Execution: Image File Execution Options Injection
-
Adds Run key to start application
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Image File Execution Options Injection
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Image File Execution Options Injection
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
3