Analysis
- max time kernel
90s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20220812-en - resource tags
- submitted
02/10/2022, 11:34
General
- Target 0ad9ad17d1b03f4ad754b00740bd0516.exe
- Size 968KB
- Sample221002-npfmhadce7
- SHA256 87e5f6215e6e6d73fc8ffbb9fdd37e96963579ddd2c4b2a23ad29ceec7ee91e0
Malware Config
Signatures
- ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
- UPX packed file 26 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Loads dropped DLL 1 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0ad9ad17d1b03f4ad754b00740bd0516.exe"C:\Users\Admin\AppData\Local\Temp\0ad9ad17d1b03f4ad754b00740bd0516.exe"1⤵
- Loads dropped DLL
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
ExtraDll.dll
memory/3272-155-0x0000000010000000-0x000000001003E000-memory.dmp
memory/3272-175-0x0000000010000000-0x000000001003E000-memory.dmp
memory/3272-136-0x0000000010000000-0x000000001003E000-memory.dmp
memory/3272-138-0x0000000010000000-0x000000001003E000-memory.dmp
memory/3272-142-0x0000000010000000-0x000000001003E000-memory.dmp
memory/3272-140-0x0000000010000000-0x000000001003E000-memory.dmp
memory/3272-144-0x0000000010000000-0x000000001003E000-memory.dmp
memory/3272-147-0x0000000010000000-0x000000001003E000-memory.dmp
memory/3272-149-0x0000000010000000-0x000000001003E000-memory.dmp
memory/3272-151-0x0000000010000000-0x000000001003E000-memory.dmp
memory/3272-153-0x0000000010000000-0x000000001003E000-memory.dmp
memory/3272-132-0x0000000010000000-0x000000001003E000-memory.dmp
memory/3272-134-0x0000000010000000-0x000000001003E000-memory.dmp
memory/3272-161-0x0000000010000000-0x000000001003E000-memory.dmp
memory/3272-157-0x0000000010000000-0x000000001003E000-memory.dmp
memory/3272-163-0x0000000010000000-0x000000001003E000-memory.dmp
memory/3272-165-0x0000000010000000-0x000000001003E000-memory.dmp
memory/3272-167-0x0000000010000000-0x000000001003E000-memory.dmp
memory/3272-169-0x0000000010000000-0x000000001003E000-memory.dmp
memory/3272-171-0x0000000010000000-0x000000001003E000-memory.dmp
memory/3272-173-0x0000000010000000-0x000000001003E000-memory.dmp
memory/3272-159-0x0000000010000000-0x000000001003E000-memory.dmp
memory/3272-133-0x0000000010000000-0x000000001003E000-memory.dmp
memory/3272-177-0x0000000075630000-0x000000007566C000-memory.dmp
memory/3272-178-0x0000000010000000-0x000000001003E000-memory.dmp