Overview

overview

9

Static

static

8

pocketrar350sc.exe

windows7_x64

9

pocketrar350sc.exe

windows10_x64

9

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows10_x64
  • resource
    win10v20210410
  • submitted
    07-05-2021 04:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    pocketrar350sc.exe

  • Size

    381KB

  • MD5

    a6a4daa74d974f2d92b35392207070ce

  • SHA1

    6ece78cd87fe221ec4113cad8d41bef2475408ea

  • SHA256

    38e1821b1289f087cfd17799a47081a368348fdef2c45dd216390269f8e52bb3

  • SHA512

    7a1cc21ec30728aadc04146b3a4acaf1b46359d49058a2143e08aa9f999360e92e80f968d0ca820d32959b08028aa3639796564b24c7474bc6a8f38aade19a91

Score
9/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • Loads dropped DLL 2 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\pocketrar350sc.exe
    "C:\Users\Admin\AppData\Local\Temp\pocketrar350sc.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:4048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\xbl11E8.tmp
    MD5

    fe763c2d71419352141c77c310e600d2

    SHA1

    6bb51ebcbde9fe5556a74319b49bea37d5542d5e

    SHA256

    7fdf10ca02d2238e22fda18dfbede9750da9f257221802c8b86c557c19c9bc7b

    SHA512

    147b3a525b1fef98ae46923dcbe25edfcf7b523f347857466eefa88f09ec053ba309dfbee5f1454ec64aba0518ee21986c4b6a506f8550efb1163c8f04d7482c

    Download Submit
  • \Users\Admin\AppData\Local\Temp\xbl11E8.tmp
    MD5

    fe763c2d71419352141c77c310e600d2

    SHA1

    6bb51ebcbde9fe5556a74319b49bea37d5542d5e

    SHA256

    7fdf10ca02d2238e22fda18dfbede9750da9f257221802c8b86c557c19c9bc7b

    SHA512

    147b3a525b1fef98ae46923dcbe25edfcf7b523f347857466eefa88f09ec053ba309dfbee5f1454ec64aba0518ee21986c4b6a506f8550efb1163c8f04d7482c

    Download Submit