General
- Target jaffacakes118_Actualtests.Cisco.650-178.Exam.Q.and.A.06.09.09-DDU.exe
- Size 425KB
- Sample260910-cvbpyswvdz
- SHA256 bfa396c3b80a3ea63f5aa5f166bcc5f6ab57497d3e2fade935ff089886bb2c2c
Score
10/10
Malware Config
Targets
-
- Target jaffacakes118_Actualtests.Cisco.650-178.Exam.Q.and.A.06.09.09-DDU.exe
- Size 425KB
- SHA256 bfa396c3b80a3ea63f5aa5f166bcc5f6ab57497d3e2fade935ff089886bb2c2c
Score10/10-
UAC bypass
-
Adds policy Run key to start application
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
4