faeac7944c42218d2d5a569ebc5e1ab1569ab5185bbf5b74916ad21e8819a3e0 | Triage

Sharing

General

Target

faeac7944c42218d2d5a569ebc5e1ab1569ab5185bbf5b74916ad21e8819a3e0
Size

80KB
Sample

220415-kygdlseehj
MD5

6f8cca4956ffc5794f7bbbc63f85bca8
SHA1

67f0c4f9aedc316566e11d0cb3018d634aa65e9c
SHA256

faeac7944c42218d2d5a569ebc5e1ab1569ab5185bbf5b74916ad21e8819a3e0
SHA512

60591958b3dd71357810c635257d2eb6dfbecca5f90daa2157fa8f56994752990bd8e9a2355383cca54b69a73a95d7352cacd34f2d5269f722d56dee3b15bd30

Score

10^/10

discovery evasion exploit trojan

Malware Config

Targets

- Target
  
  faeac7944c42218d2d5a569ebc5e1ab1569ab5185bbf5b74916ad21e8819a3e0
- Size
  
  80KB
- MD5
  
  6f8cca4956ffc5794f7bbbc63f85bca8
- SHA1
  
  67f0c4f9aedc316566e11d0cb3018d634aa65e9c
- SHA256
  
  faeac7944c42218d2d5a569ebc5e1ab1569ab5185bbf5b74916ad21e8819a3e0
- SHA512
  
  60591958b3dd71357810c635257d2eb6dfbecca5f90daa2157fa8f56994752990bd8e9a2355383cca54b69a73a95d7352cacd34f2d5269f722d56dee3b15bd30
Score

10^/10

discovery evasion exploit trojan
- UAC bypass
  evasion trojan
- Possible privilege escalation attempt
  exploit
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Modifies file permissions
  discovery
- Checks whether UAC is enabled
  evasion trojan
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

File Permissions Modification

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

discoveryevasionexploittrojan

behavioral2

discoveryevasionexploittrojan