Overview

overview

9

Static

static

e0b731b177...42.exe

windows7-x64

9

e0b731b177...42.exe

windows10-2004-x64

9

Analysis

  • max time kernel
    90s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-10-2022 19:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    e0b731b17797af33a630fa747310f2bf57542a03cb361c98aebce1a5610da442.exe

  • Size

    313KB

  • MD5

    831695bdd406d6957b13f74dfe9baef0

  • SHA1

    0c654e6cb689ec7e82c17b434a692a21aa9c0118

  • SHA256

    e0b731b17797af33a630fa747310f2bf57542a03cb361c98aebce1a5610da442

  • SHA512

    98b1f4f15a285e9dccadc874be82c3032eebc75fc995fe62eed07187737d1c70a9b125019c6b6876413414b76d195ec13ea8aba6fef0b6f6c3b933ed16c16f57

  • SSDEEP

    6144:RiqhlLzQvly3Q89/9RYVI6qp1wXE3DtalKoPiN6e3sLwYl8SX:RiWlLzQtygkYVI6qp1wXEBaqU8Yl8SX

Score
9/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • Loads dropped DLL 4 IoCs
  • Drops file in Windows directory 4 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e0b731b17797af33a630fa747310f2bf57542a03cb361c98aebce1a5610da442.exe
    "C:\Users\Admin\AppData\Local\Temp\e0b731b17797af33a630fa747310f2bf57542a03cb361c98aebce1a5610da442.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Windows directory
    • Suspicious use of SetWindowsHookEx
    PID:5064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\gsiB942.tmp
    Filesize

    172KB

    MD5

    685f1cbd4af30a1d0c25f252d399a666

    SHA1

    6a1b978f5e6150b88c8634146f1406ed97d2f134

    SHA256

    0e478c95a7a07570a69e6061e7c1da9001bccad9cc454f2ed4da58824a13e0f4

    SHA512

    6555ad6b4f4f26105ca8aad64501d74519a3e091f559b4b563d6ffb20a2ddfcde65e4fe94971a9bc65e86db577f2548ca00f9920d341c8ea808b04c0947d61d9

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\gsiB942.tmp
    Filesize

    172KB

    MD5

    685f1cbd4af30a1d0c25f252d399a666

    SHA1

    6a1b978f5e6150b88c8634146f1406ed97d2f134

    SHA256

    0e478c95a7a07570a69e6061e7c1da9001bccad9cc454f2ed4da58824a13e0f4

    SHA512

    6555ad6b4f4f26105ca8aad64501d74519a3e091f559b4b563d6ffb20a2ddfcde65e4fe94971a9bc65e86db577f2548ca00f9920d341c8ea808b04c0947d61d9

    Download Submit

  • C:\Windows\~GLC0000.TMP
    Filesize

    151KB

    MD5

    d48743b006496864f88f56719432fe26

    SHA1

    00af8dc54ab5617f72367d3c85336c9085f52744

    SHA256

    68ae6a552c63f331586d27930b4dcb3da63a88a86e1928cf078ccc7769e4970f

    SHA512

    104f91188d7fc6c314d45083b0c97b38c8207a1c63589ad134c9b854319f1dd2075435c1d104f3e85460245b4ee1b2cfaa9e231824c846709c160173585e30fa

    Download Submit

  • C:\Windows\~GLH0000.TMP
    Filesize

    26KB

    MD5

    89cf6af0a2a1cfebc82851c20852c121

    SHA1

    9106f4ade6a696d5f98968bce895333ad5dbd9ae

    SHA256

    94ef91b4c7864bd1ecc0db099e58298708bc5d22da40132ebb1c17feb4675964

    SHA512

    af4a484b9bb8850c29fbfee1784b3cd3f78e6cbb419ad49262c28be16b31b5e1b43328c3088ae83f202ad2941062fa94325d77078f5c8e07a11a3fea1b56d627

    Download Submit

  • memory/5064-132-0x0000000000400000-0x0000000000407000-memory.dmp

    Filesize

    28KB

    Download

  • memory/5064-136-0x0000000002180000-0x00000000021F3000-memory.dmp

    Filesize

    460KB

    Download

  • memory/5064-138-0x0000000000400000-0x0000000000407000-memory.dmp

    Filesize

    28KB

    Download

  • memory/5064-139-0x0000000002180000-0x00000000021F3000-memory.dmp

    Filesize

    460KB

    Download