Analysis
-
max time kernel
150s -
max time network
8s -
platform
windows7_x64 -
resource
win7v20210410 -
submitted
29/05/2021, 07:24
Static task
static1
Behavioral task
behavioral1
Sample
sample.exe
Resource
win7v20210410
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
sample.exe
Resource
win10v20210408
windows10_x64
0 signatures
0 seconds
General
-
Target
sample.exe
-
Size
2.2MB
-
MD5
88af65ad6b23ee2f9745ddacff604748
-
SHA1
7636ea6f26c50379256b2507b7c21ecf45ad1d80
-
SHA256
641156d7dcbfa28f469a4df5e49c46efd4af299d418324cf108aa50aa7d7f2b0
-
SHA512
eface5855e358335336dadf3fda622a5609f0acacac10ab186a248c8b22e09ca1ed16e5d1d20021ba72950bb7189c3b3896c9adc513eb3caebca8bf8827b149e
Score
9/10
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 2 IoCs
Detects file using ACProtect software.
resource yara_rule behavioral1/files/0x00040000000130d0-60.dat acprotect behavioral1/files/0x00050000000130d3-61.dat acprotect -
resource yara_rule behavioral1/files/0x00040000000130d0-60.dat upx behavioral1/files/0x00050000000130d3-61.dat upx -
Loads dropped DLL 2 IoCs
pid Process 1084 sample.exe 1084 sample.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe 1084 sample.exe