Analysis
-
max time kernel
150s -
max time network
135s -
platform
windows10_x64 -
resource
win10v20210408 -
submitted
29/05/2021, 07:24
Static task
static1
Behavioral task
behavioral1
Sample
sample.exe
Resource
win7v20210410
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
sample.exe
Resource
win10v20210408
windows10_x64
0 signatures
0 seconds
General
-
Target
sample.exe
-
Size
2.2MB
-
MD5
88af65ad6b23ee2f9745ddacff604748
-
SHA1
7636ea6f26c50379256b2507b7c21ecf45ad1d80
-
SHA256
641156d7dcbfa28f469a4df5e49c46efd4af299d418324cf108aa50aa7d7f2b0
-
SHA512
eface5855e358335336dadf3fda622a5609f0acacac10ab186a248c8b22e09ca1ed16e5d1d20021ba72950bb7189c3b3896c9adc513eb3caebca8bf8827b149e
Score
9/10
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 2 IoCs
Detects file using ACProtect software.
resource yara_rule behavioral2/files/0x000200000001ab26-114.dat acprotect behavioral2/files/0x000100000001ab2a-115.dat acprotect -
resource yara_rule behavioral2/files/0x000200000001ab26-114.dat upx behavioral2/files/0x000100000001ab2a-115.dat upx -
Loads dropped DLL 2 IoCs
pid Process 2544 sample.exe 2544 sample.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe 2544 sample.exe