Analysis
-
max time kernel
160s -
max time network
165s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
23-11-2022 20:03
General
-
Target
a4aa0f30ef765ba2bbd4221696581a68195b4c2a96e980a7c77c285c9c1473a6.exe
-
Size
1.1MB
-
MD5
a31dcb21ab44d2894a078d57800eeeb8
-
SHA1
caeaae4259fe41e5b16fc8fb8e41fc7bcb1ea2e9
-
SHA256
a4aa0f30ef765ba2bbd4221696581a68195b4c2a96e980a7c77c285c9c1473a6
-
SHA512
6a28de209978a4460eb4d00e37cdc5b6a557d5870ad15ed41709234b6d2be517a4e9fa988927ede38c6ecd2aa05cd4944626982a9cc04fbad03baac6e63ccb7c
-
SSDEEP
24576:z92OXiord5vGIQID4eWWyia7K0/avlY0RbylZu+QOi7UU:B2OXb5v/UK0/o/H4i7
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Loads dropped DLL 1 IoCs
-
Drops file in Windows directory 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 36 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a4aa0f30ef765ba2bbd4221696581a68195b4c2a96e980a7c77c285c9c1473a6.exe"C:\Users\Admin\AppData\Local\Temp\a4aa0f30ef765ba2bbd4221696581a68195b4c2a96e980a7c77c285c9c1473a6.exe"1⤵
- Loads dropped DLL
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
98KB
MD54e70aa97f22995853da109a2a05b1335
SHA116d243efe827436907a65aeafcd02312960225a0
SHA256ee59d2fd30511ce7611a4a229610584a52678d9423f41c23e2aaae56b211bd4f
SHA5121aed4011fcbb0eabc14d236d0aea4b54e33d02365777196ceb22d84aaf4de7469bda0f5d124bd022c3c1c3748cd6467008cef0de1f0f025e7a324fbc7152854e
-
Filesize
2.9MB
-
Filesize
2.9MB
-
Filesize
16KB
-
Filesize
32KB
-
Filesize
248KB
-
Filesize
2.9MB
-
Filesize
2.9MB
-
Filesize
2.9MB
-
Filesize
268KB
-
Filesize
2.9MB
-
Filesize
2.9MB
-
Filesize
28KB
-
Filesize
28KB
-
Filesize
8KB
-
Filesize
268KB
-
Filesize
248KB
-
Filesize
2.9MB
-
Filesize
16KB