General
- Target jaffacakes118_1be3b522c282fdf5612cfb8a9eb91971c4379aca613c8cd9f79483d29a435755.bin
- Size 704KB
- Sample261002-g22beaaf67
- SHA256 1be3b522c282fdf5612cfb8a9eb91971c4379aca613c8cd9f79483d29a435755
Score
10/10
Malware Config
Targets
-
- Target jaffacakes118_1be3b522c282fdf5612cfb8a9eb91971c4379aca613c8cd9f79483d29a435755.bin
- Size 704KB
- SHA256 1be3b522c282fdf5612cfb8a9eb91971c4379aca613c8cd9f79483d29a435755
Score10/10-
UAC bypass
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
3