f6c4e719a3d232fe70157ad15e5e19affcc65692e43296c83247fe9f3b1d5171 | Triage

Sharing

General

Target

f6c4e719a3d232fe70157ad15e5e19affcc65692e43296c83247fe9f3b1d5171N
Size

2.3MB
Sample

240928-vfjfcsyfqa
MD5

3acf0f8250e73855a38a3391f6839300
SHA1

303df2cf9b94808dae96640115b9fa55c30f9637
SHA256

f6c4e719a3d232fe70157ad15e5e19affcc65692e43296c83247fe9f3b1d5171
SHA512

8b70668c1bbb0d624836f50a3d61c951eeae4376ef99b410731f8b3d7debf29340caa6aa4260b81b220a97943311238e233eaf204cb4052c9e9106bf48bb576e
SSDEEP

49152:3jvk2d9rJpNJ6jUFdXaDoIHmXMupzh72lxakn2YpHdy4ZBgIoooNe:3rkI9rSjA5aDo73pzF2bz3p9y4HgIoov

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  f6c4e719a3d232fe70157ad15e5e19affcc65692e43296c83247fe9f3b1d5171N
- Size
  
  2.3MB
- MD5
  
  3acf0f8250e73855a38a3391f6839300
- SHA1
  
  303df2cf9b94808dae96640115b9fa55c30f9637
- SHA256
  
  f6c4e719a3d232fe70157ad15e5e19affcc65692e43296c83247fe9f3b1d5171
- SHA512
  
  8b70668c1bbb0d624836f50a3d61c951eeae4376ef99b410731f8b3d7debf29340caa6aa4260b81b220a97943311238e233eaf204cb4052c9e9106bf48bb576e
- SSDEEP
  
  49152:3jvk2d9rJpNJ6jUFdXaDoIHmXMupzh72lxakn2YpHdy4ZBgIoooNe:3rkI9rSjA5aDo73pzF2bz3p9y4HgIoov
Score

7^/10

discovery persistence
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Drops file in System32 directory
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence