General
- Target Illerka.C.zip
- Size 69KB
- Sample260930-fxkmesww6l
- SHA256 1c4fc78582375a26c8006f94a2508bdbcab8e9270db77664267e8cd40d88b0a5
- MD5 875068eba4dbca14af4ecee9f3ce39c8
- SHA1 b01649b3b0eee07249c12b206bb965d05a4d46c1
- SHA512 454ea60c2ddafe84624d201806951ab5bd39ee02b791d0c9156b528b472c9450a80931c2e824ef6fd766566b6d84d15b5e59ecf54d3409edc72a30c5fcb23a16
- SSDEEP 1536:0YQmXQuI3FzR2FtNwe2fEP5nUYveadoqpR+nDp2U8+REFWEn8VgiHxKLI:0YQ6IFz4ReEpZOqpMDNREcEn8JKLI
- TLSH T1D663029C9714768A19AEBEE7C434E694AD60878E5AB08C3D588E3A27F0F0C170C17776
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Illerka.C.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
Illerka.C.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target Illerka.C.exe
- Size 378KB
- SHA256 cde188d6c4d6e64d6abfdea1e113314f9cdf9417bca36eb7201e6b766e5f5a7f
- MD5 c718a1cbf0e13674714c66694be02421
- SHA1 001d5370d3a7ee48db6caaecb1c213b5dfdf8e65
- SHA512 ba0ddff47b618740dfcb63024435c36d895889dd3cf6b4559969283ba8100e8063f5c7767e56dfab67a2b5c96e4ae22e141e5b09e81be5cec9aa7ca7827b4b8a
- SSDEEP 1536:IM64RFcdoYicOWtlo4yJDsE4KmtZxq3/1d+DSaumOY6eeLnAGTpZspibfaSuOypE:IMJkoY9lpoaKm2vacPESu/wK3+
- TLSH T17D84F726092CDC0ED26078F896B0E5AEE07CDE040D6E5464D7B7BD9A8938B5FED1C18D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UAC bypass
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
2