General
- Target LogonUIInstaller.exe
- Size 49.1MB
- Sample260907-sr4jkaxycz
- SHA256 383b41b4fbf8f15edefae51b6f2e4ae9361a4070efbe05e65d1f23c8c0b16a64
- MD5 da887ed415f33d4b85b70bae12323fde
- SHA1 33e1bcab551e2ed7f79d815837c9a6ca30588e87
- SHA512 972d2cfd43affeab505453b9e7c1bdfba7f5dcc86c898ee7b82bbaf76064b79db80bf55b5f6e53eff2c92fef0a0a2f09f787b2f4b7dedc5a80f3728174fd0f8d
- SSDEEP 786432:qUCokWpN3kk9blZYMUKM/p8IgTO/HV968PbXtWri4BnKaFtKU:q+kWLPZxUHgTCKUvS9K
- TLSH T18EB7338B416E3186CC2789301CBB12A5F9B71C2D7506ABA6E291FF307677D14FA50E1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
LogonUIInstaller.exe
Resource
win10v2004-20260513-en
9 signatures
600 seconds
Malware Config
Targets
-
- Target LogonUIInstaller.exe
- Size 49.1MB
- SHA256 383b41b4fbf8f15edefae51b6f2e4ae9361a4070efbe05e65d1f23c8c0b16a64
- MD5 da887ed415f33d4b85b70bae12323fde
- SHA1 33e1bcab551e2ed7f79d815837c9a6ca30588e87
- SHA512 972d2cfd43affeab505453b9e7c1bdfba7f5dcc86c898ee7b82bbaf76064b79db80bf55b5f6e53eff2c92fef0a0a2f09f787b2f4b7dedc5a80f3728174fd0f8d
- SSDEEP 786432:qUCokWpN3kk9blZYMUKM/p8IgTO/HV968PbXtWri4BnKaFtKU:q+kWLPZxUHgTCKUvS9K
- TLSH T18EB7338B416E3186CC2789301CBB12A5F9B71C2D7506ABA6E291FF307677D14FA50E1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Possible privilege escalation attempt
-
Modifies file permissions
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
File and Directory Permissions Modification: Windows File and Directory Permissions Modification
-
Drops file in System32 directory