f726909ac94722a55602aacf2fe71127aa305d93f8bf3305f6f95d6249adb5af

Analysis

max time kernel
313s
max time network
320s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 15:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f726909ac94722a55602aacf2fe71127aa305d93f8bf3305f6f95d6249adb5af.exe
Size

5.9MB
MD5

c4a6a5b66b640a9f02c52d06b9b6b411
SHA1

bed69312c894ec2ef3b04432b89766018e471317
SHA256

f726909ac94722a55602aacf2fe71127aa305d93f8bf3305f6f95d6249adb5af
SHA512

9a6b259715ebf430398a2dcb09530a41026d90713805ec6a4568f4fc8dfd8e422fc60c04eb2dfccd724dffa926d567c9afa8975681254c4687ebe678b8e9d667
SSDEEP

98304:XkYz1dwAmdAfubdsvagIABISmnhmCsyvNHxD3S4ST62RUBDzeYJf+Q:X1dwTdsCgBBISG8CJxDiAK6+Q

Score

9^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 48 IoCs

Detects file using ACProtect software.

Processes:

resource	yara_rule
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	acprotect

UPX packed file 48 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

Processes:

resource	yara_rule
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx
C:\Users\Admin\AppData\Local\Temp\{83E28700-24ED-4451-ADB5-40C7F664F07C}.dll	upx

Loads dropped DLL 48 IoCs

Processes: