General
-
Target
3afdbb55108d1c254149483a9f5205c500df189f52248dab0bbe6a4159888f0a
-
Size
1.1MB
-
Sample
221125-ygjz3adh5w
-
MD5
89407a4c6371f031a3f2196655270997
-
SHA1
1af7e99baa61ffaebef1891ea4d267ef599fe8d9
-
SHA256
3afdbb55108d1c254149483a9f5205c500df189f52248dab0bbe6a4159888f0a
-
SHA512
e7b05bdfb2c62d3526a55f9a2b5bb30e3fae3a997c47af29db34befedf9dbe9ffa98774dd8b22e6289a767b0d4fd243f07f7f49b768d806c1c6bbf7bcd171200
-
SSDEEP
24576:i5V/MMqXZNrYcwr0hDLYzyFo4GxXjgX5X85cqzGMQXj2qBIS/+2:gVDiZBP42Yzlm5s5VGMSj2qBv
Static task
static1
Behavioral task
behavioral1
Sample
3afdbb55108d1c254149483a9f5205c500df189f52248dab0bbe6a4159888f0a.exe
Resource
win7-20220812-en
Malware Config
Targets
-
-
Target
3afdbb55108d1c254149483a9f5205c500df189f52248dab0bbe6a4159888f0a
-
Size
1.1MB
-
MD5
89407a4c6371f031a3f2196655270997
-
SHA1
1af7e99baa61ffaebef1891ea4d267ef599fe8d9
-
SHA256
3afdbb55108d1c254149483a9f5205c500df189f52248dab0bbe6a4159888f0a
-
SHA512
e7b05bdfb2c62d3526a55f9a2b5bb30e3fae3a997c47af29db34befedf9dbe9ffa98774dd8b22e6289a767b0d4fd243f07f7f49b768d806c1c6bbf7bcd171200
-
SSDEEP
24576:i5V/MMqXZNrYcwr0hDLYzyFo4GxXjgX5X85cqzGMQXj2qBIS/+2:gVDiZBP42Yzlm5s5VGMSj2qBv
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Deletes itself
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-