4c9216dbb6a245c7ca71e30c463d161c6721febb1fc3f88f01773ea75a5309e9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AdskLicensingService.exe
Size

34.3MB
Sample

230930-zgyznafd3v
MD5

65ae97bda78005e18914ab680ef660b3
SHA1

51451284b5f68298eea9865c89e88cca284a105c
SHA256

4c9216dbb6a245c7ca71e30c463d161c6721febb1fc3f88f01773ea75a5309e9
SHA512

2352816d214ea3c7950d15af94c43be93e5ac18aa4361dd4feb2f283a340ff448713b1b08fd7dfa61d5912cd56f5348f642835d84dd565fb4f4df8c51edc4d09
SSDEEP

786432:xB6UpPXVa0JRGIsI17ePD/d4MKShu+9lQxYDI:/5pNVK/6pKgYE

Score

7^/10

Malware Config

Targets

- Target
  
  AdskLicensingService.exe
- Size
  
  34.3MB
- MD5
  
  65ae97bda78005e18914ab680ef660b3
- SHA1
  
  51451284b5f68298eea9865c89e88cca284a105c
- SHA256
  
  4c9216dbb6a245c7ca71e30c463d161c6721febb1fc3f88f01773ea75a5309e9
- SHA512
  
  2352816d214ea3c7950d15af94c43be93e5ac18aa4361dd4feb2f283a340ff448713b1b08fd7dfa61d5912cd56f5348f642835d84dd565fb4f4df8c51edc4d09
- SSDEEP
  
  786432:xB6UpPXVa0JRGIsI17ePD/d4MKShu+9lQxYDI:/5pNVK/6pKgYE
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2