b7672923b7ae3fa1cb0f7fdbf5ca6ec88ad1cedfe821d3cd10725f5ccce9251c

Analysis

max time kernel
204s
max time network
239s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 11:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b7672923b7ae3fa1cb0f7fdbf5ca6ec88ad1cedfe821d3cd10725f5ccce9251c.exe
Size

17.0MB
MD5

4e40e1fc2f24f336878624c689aa70bb
SHA1

082604da28ecfffd71e9f4167bff5083d5eb763f
SHA256

b7672923b7ae3fa1cb0f7fdbf5ca6ec88ad1cedfe821d3cd10725f5ccce9251c
SHA512

f4d2b4313a9ae2fe93999a3b3ec08731b30efc8aa24fa3d30ae0abd7642fb91429ede0b5c4656586993603561290b1e63b25a58a3ac3284c88b7e98c871fa697
SSDEEP

393216:EOq4pHHd5lVKso0ZxlDXXJGem/6AvV5eMrQ:cslVNnlDpGD/ji5

Score

9^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 50 IoCs

Detects file using ACProtect software.

Processes:

resource	yara_rule
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	acprotect

UPX packed file 51 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

Processes:

resource	yara_rule
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
behavioral2/memory/4136-181-0x0000000005280000-0x00000000052DB000-memory.dmp	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{4DA863FF-1186-492D-B168-41312728302D}.dll	upx

Loads dropped DLL 50 IoCs

Processes: