Analysis
-
max time kernel
91s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 18:48
Static task
static1
Behavioral task
behavioral1
Sample
43c3168417fd6625a6249ac3d9f708ac13c0b9769ccc475047a4e0dff8a53ea2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
43c3168417fd6625a6249ac3d9f708ac13c0b9769ccc475047a4e0dff8a53ea2.exe
Resource
win10v2004-20220901-en
General
-
Target
43c3168417fd6625a6249ac3d9f708ac13c0b9769ccc475047a4e0dff8a53ea2.exe
-
Size
333KB
-
MD5
0268edfbbcfeb1c39988d3a5aa585a50
-
SHA1
a9e357a8f598af8973f2dd70e7cb03c168772bde
-
SHA256
43c3168417fd6625a6249ac3d9f708ac13c0b9769ccc475047a4e0dff8a53ea2
-
SHA512
1ea38fc58f1ab69a32184f43693d27f94f18ee6fcc6f37484893bae7384c37640e9589f959e5d14fd12590c20ace61fbb1f2734ff0aeb2c498a0708f4777bfe3
-
SSDEEP
6144:fsjhG5e3v5mjsFL/ko7mIjCQ+1S/w6le9y3Aq+PznjeKMr0CsFoUXZ2hf:h5eRKa/koSIjC91SySAxjedrAoUXY1
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 2 IoCs
Detects file using ACProtect software.
Processes:
resource yara_rule C:\Users\Admin\AppData\Local\Temp\ntiC587.tmp acprotect C:\Users\Admin\AppData\Local\Temp\ntiC587.tmp acprotect -
Loads dropped DLL 2 IoCs
Processes:
43c3168417fd6625a6249ac3d9f708ac13c0b9769ccc475047a4e0dff8a53ea2.exepid process 4928 43c3168417fd6625a6249ac3d9f708ac13c0b9769ccc475047a4e0dff8a53ea2.exe 4928 43c3168417fd6625a6249ac3d9f708ac13c0b9769ccc475047a4e0dff8a53ea2.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
43c3168417fd6625a6249ac3d9f708ac13c0b9769ccc475047a4e0dff8a53ea2.exepid process 4928 43c3168417fd6625a6249ac3d9f708ac13c0b9769ccc475047a4e0dff8a53ea2.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
172KB
MD54f407b29d53e9eb54e22d096fce82aa7
SHA1a4ee25b066cac19ff679dd491f5791652bb71185
SHA256cf0ecf30fc95800a34105acb9bcb484bb594a35b3ef26ace8f122af4f9f888dc
SHA512325f7b599455195101e4c0dafd3654906d20ed2c1ce2a5f38784635e16ab545df6ee44a83bed6128239be2dee5be110552c7b246b7f52482ab31552e14b54183
-
Filesize
172KB
MD54f407b29d53e9eb54e22d096fce82aa7
SHA1a4ee25b066cac19ff679dd491f5791652bb71185
SHA256cf0ecf30fc95800a34105acb9bcb484bb594a35b3ef26ace8f122af4f9f888dc
SHA512325f7b599455195101e4c0dafd3654906d20ed2c1ce2a5f38784635e16ab545df6ee44a83bed6128239be2dee5be110552c7b246b7f52482ab31552e14b54183