Analysis
-
max time kernel
77s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
03-10-2022 19:05
General
-
Target
f2a2cf708edaaf4e881f24d97a675ce7cea13f486106537d15b560082d15a92f.exe
-
Size
221KB
-
MD5
49837ee89ae500f3873d93727641b380
-
SHA1
b5983fcf5111d8e7e3a28345e69a4acedb78fb29
-
SHA256
f2a2cf708edaaf4e881f24d97a675ce7cea13f486106537d15b560082d15a92f
-
SHA512
9884a410bbd3f418c77ec9247c34c085404a9ef1e2839953bfaaff48fab97904e9019fdd4dac9be35b40e976e589719d40e99dbedb04e45dabeac5d182ebd9e8
-
SSDEEP
6144:IQWiCPEYCCX/UPJsSIYYawUBhS1PWohZm:IjMYCzPJXLY5UB8Woh0
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 2 IoCs
Detects file using ACProtect software.
-
Loads dropped DLL 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f2a2cf708edaaf4e881f24d97a675ce7cea13f486106537d15b560082d15a92f.exe"C:\Users\Admin\AppData\Local\Temp\f2a2cf708edaaf4e881f24d97a675ce7cea13f486106537d15b560082d15a92f.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
172KB
MD54f407b29d53e9eb54e22d096fce82aa7
SHA1a4ee25b066cac19ff679dd491f5791652bb71185
SHA256cf0ecf30fc95800a34105acb9bcb484bb594a35b3ef26ace8f122af4f9f888dc
SHA512325f7b599455195101e4c0dafd3654906d20ed2c1ce2a5f38784635e16ab545df6ee44a83bed6128239be2dee5be110552c7b246b7f52482ab31552e14b54183
-
Filesize
172KB
MD54f407b29d53e9eb54e22d096fce82aa7
SHA1a4ee25b066cac19ff679dd491f5791652bb71185
SHA256cf0ecf30fc95800a34105acb9bcb484bb594a35b3ef26ace8f122af4f9f888dc
SHA512325f7b599455195101e4c0dafd3654906d20ed2c1ce2a5f38784635e16ab545df6ee44a83bed6128239be2dee5be110552c7b246b7f52482ab31552e14b54183
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
464KB