Overview
overview
10Static
static
106e9fdbd85c...ef.exe
windows7-x64
16e9fdbd85c...ef.exe
windows10-2004-x64
1"AKL.dll
windows7-x64
3"AKL.dll
windows10-2004-x64
3"AKL.exe
windows7-x64
1"AKL.exe
windows10-2004-x64
1"AKL.dll
windows7-x64
1"AKL.dll
windows10-2004-x64
1"AKL.dll
windows7-x64
1"AKL.dll
windows10-2004-x64
1"AKL.chm
windows7-x64
1"AKL.chm
windows10-2004-x64
1"AKL.exe
windows7-x64
6"AKL.exe
windows10-2004-x64
6$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3AKV.exe
windows7-x64
1AKV.exe
windows10-2004-x64
1Uninstall.exe
windows7-x64
7Uninstall.exe
windows10-2004-x64
7qs.html
windows7-x64
1qs.html
windows10-2004-x64
1Analysis
-
max time kernel
142s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
22-01-2024 03:37
Behavioral task
behavioral1
Sample
6e9fdbd85c3f5e072b9cbe6a5fe316ef.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6e9fdbd85c3f5e072b9cbe6a5fe316ef.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
"AKL.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
"AKL.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
"AKL.exe
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
"AKL.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
"AKL.dll
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
"AKL.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral9
Sample
"AKL.dll
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
"AKL.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
"AKL.chm
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
"AKL.chm
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
"AKL.exe
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
"AKL.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
AKV.exe
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
AKV.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
Uninstall.exe
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
Uninstall.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
qs.html
Resource
win7-20231129-en
Behavioral task
behavioral22
Sample
qs.html
Resource
win10v2004-20231215-en
General
-
Target
"AKL.exe
-
Size
218KB
-
MD5
780bdf7f767d8a85f1844721cd0077fa
-
SHA1
1ad480226e8532edda9909030cadac61c9a22ba1
-
SHA256
39f0a4980627c596514e51a540d4e721c8f1bf3d0c9e69abc8b3f11f7c4b9314
-
SHA512
6d68ac87d611ca8dc3869438346681782df17f70128200edc35a82defc966da2597aaf4416bbd4a7f7b34b5ca424491bf4c4b7148aea02502242519b0c8e0577
-
SSDEEP
3072:P+efErpiiTTYBA63HxDzIzb6xl7KhnftzEdJZktpFAwl+DLNeIb:PBfKTEb39czbQtKCyrCTMI
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
Processes:
_AKL.exedescription ioc process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\_AKL = "C:\\Users\\Admin\\AppData\\Local\\Temp\\_AKL.exe" _AKL.exe -
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes:
_AKL.exedescription pid process Token: 33 3432 _AKL.exe Token: SeIncBasePriorityPrivilege 3432 _AKL.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
_AKL.exepid process 3432 _AKL.exe -
Suspicious use of SendNotifyMessage 1 IoCs
Processes:
_AKL.exepid process 3432 _AKL.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
_AKL.exepid process 3432 _AKL.exe