6cfbd43d0852fea6403806c71405ab996b1e8477b6a5020b0beb5c96098faeac

Analysis

max time kernel
193s
max time network
207s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 10:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6cfbd43d0852fea6403806c71405ab996b1e8477b6a5020b0beb5c96098faeac.exe
Size

2.1MB
MD5

8872b115d14afca471593b1d6f217fe8
SHA1

4e98b2638c416c307551eaddc688a442f3910923
SHA256

6cfbd43d0852fea6403806c71405ab996b1e8477b6a5020b0beb5c96098faeac
SHA512

172f78eeda4c58cdfd10bc0993901b37ee56ff4435314544924636b48070e6c3cbeddb9489a379780eeb71be01e417337235c76f3e92808638e773c6c0e3dec1
SSDEEP

49152:nOYtODosZIo+rSfpd+GqHLpCVtvlkQBmm9zFEKoEngDTEM1t4QWnEjuAl:TOZIo0Sf7+FrpCLqQBmm9FEKoKgn1tjL

Score

9^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 50 IoCs

Detects file using ACProtect software.

Processes:

resource	yara_rule
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	acprotect

UPX packed file 52 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

Processes:

resource	yara_rule
behavioral2/memory/3148-132-0x0000000000400000-0x0000000000A27000-memory.dmp	upx
behavioral2/memory/3148-137-0x0000000000400000-0x0000000000A27000-memory.dmp	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{FD80A9A3-D876-4819-AA5A-B1E2EE639070}.dll	upx

Loads dropped DLL 50 IoCs

Processes: