General

  • Target

    EXM_Premium_Tweaking_Utility_1.0_Cracked.bat

  • Size

    672KB

  • Sample

    240701-gc34ps1ckj

  • MD5

    f9ca73d63fe61c4c401528fb470ce08e

  • SHA1

    584f69b507ddf33985673ee612e6099aff760fb1

  • SHA256

    16431cc14917abeb316e0bc44045440a8f86b7ac4fdd0dce99de6435d493ecca

  • SHA512

    6fd03320ec84baf09a16a127c2c0ed3c265906fcb1a3b807c13001e775c396b66539238392438a8f290be04b8b8684050736331f8f99dbe8b868b44f154dd9de

  • SSDEEP

    3072:BIGzQbmbkAqA2xH7VkKEn14IZVvisLur+K3:BIGiVNEn14IZVvisL43

Malware Config

Targets

    • Target

      EXM_Premium_Tweaking_Utility_1.0_Cracked.bat

    • Size

      672KB

    • MD5

      f9ca73d63fe61c4c401528fb470ce08e

    • SHA1

      584f69b507ddf33985673ee612e6099aff760fb1

    • SHA256

      16431cc14917abeb316e0bc44045440a8f86b7ac4fdd0dce99de6435d493ecca

    • SHA512

      6fd03320ec84baf09a16a127c2c0ed3c265906fcb1a3b807c13001e775c396b66539238392438a8f290be04b8b8684050736331f8f99dbe8b868b44f154dd9de

    • SSDEEP

      3072:BIGzQbmbkAqA2xH7VkKEn14IZVvisLur+K3:BIGiVNEn14IZVvisL43

MITRE ATT&CK Matrix ATT&CK v13

Execution

Command and Scripting Interpreter

1
T1059

PowerShell

1
T1059.001

Privilege Escalation

Abuse Elevation Control Mechanism

1
T1548

Bypass User Account Control

1
T1548.002

Defense Evasion

Abuse Elevation Control Mechanism

1
T1548

Bypass User Account Control

1
T1548.002

Impair Defenses

1
T1562

Disable or Modify Tools

1
T1562.001

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks