General
- Target jaffacakes118_de629d333a4f39ca7b62809ef62facd92a2796cb61ad087cee48daa7efcc6880.bin
- Size 91KB
- Sample261002-jsrrqaxeqf
- SHA256 de629d333a4f39ca7b62809ef62facd92a2796cb61ad087cee48daa7efcc6880
Score
10/10
Malware Config
Targets
-
- Target jaffacakes118_de629d333a4f39ca7b62809ef62facd92a2796cb61ad087cee48daa7efcc6880.bin
- Size 91KB
- SHA256 de629d333a4f39ca7b62809ef62facd92a2796cb61ad087cee48daa7efcc6880
Score10/10-
UAC bypass
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Checks whether UAC is enabled
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Event Triggered Execution
1AppInit DLLs
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Indicator Removal
1File Deletion
1Modify Registry
2