Analysis
-
max time kernel
34s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
30-10-2022 21:12
General
-
Target
bb79b575e300f1d2e23e46c88ce245c8c52af75a1d6510a847d5f8d3fc6ab15e.exe
-
Size
528KB
-
MD5
a22fb2c054bcfbb7af5bd339767f1110
-
SHA1
e815ca38fcab15594c7c6dd3a52eaf3daaf48eb9
-
SHA256
bb79b575e300f1d2e23e46c88ce245c8c52af75a1d6510a847d5f8d3fc6ab15e
-
SHA512
5d31b2a0e80d1efd18fe79b41615c1f35718e2de0ea5dcf04208d74a297d3d7a9e353629e6d619c3ca6d66c38a4bf58ffc6472370f6413cef5ddc07083a469ab
-
SSDEEP
3072:ZJd0q2IOzLKOeNW0BosbiexLUbVmRvKAga/B6NT7vVoQEliXgys+3zZdcu:fqnbeNZouPWbVmxK+/BiT7vzKi3s+
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
-
Loads dropped DLL 1 IoCs
-
Drops file in System32 directory 1 IoCs
-
Drops file in Windows directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bb79b575e300f1d2e23e46c88ce245c8c52af75a1d6510a847d5f8d3fc6ab15e.exe"C:\Users\Admin\AppData\Local\Temp\bb79b575e300f1d2e23e46c88ce245c8c52af75a1d6510a847d5f8d3fc6ab15e.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
- Drops file in Windows directory
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
22KB
MD52a49b50ef5d7b0add47f7318de5655cb
SHA188824905ecdbee1d1b104d84098e6d31b5441ffb
SHA256daa77961614405b008b427263fe46c8db004e3cf637659aa94b2325332d207e9
SHA51219ec41d781b269fa1e724e01f9ca6ba6fb63a8c93f313f1b688ede2eddae8b5dedd38d63451ddff05c448e845e0e2fe863b2a55276d12b6520406ea8760ae031
-
Filesize
8KB
-
Filesize
528KB
-
Filesize
84KB