General
-
Target
68b8275dbc00848a55e3318d92106caf34d02c7f2906dd5f42ec54d17f76cb22
-
Size
2.2MB
-
Sample
221128-settlacb35
-
MD5
c9c83cb872e16f49fb7cdc15ac9b701f
-
SHA1
e60dc9c66f47f6c6abe0ff0be386ae4c6ab92f5d
-
SHA256
68b8275dbc00848a55e3318d92106caf34d02c7f2906dd5f42ec54d17f76cb22
-
SHA512
47cfa23405afe5cb23491cb67e6fc0d47d67038de182360eadb37662d773f493a0824cded3084ae117e87a8250eaba866c5351d8f88645913179a9bb58d45fe5
-
SSDEEP
49152:+N/xs6uSmvJ0hSRLgK/Ci+YK+rxLuGvjsuAubKJ:+FmvJdRLDCByLuKjRY
Static task
static1
Behavioral task
behavioral1
Sample
68b8275dbc00848a55e3318d92106caf34d02c7f2906dd5f42ec54d17f76cb22.exe
Resource
win7-20220901-en
Malware Config
Targets
-
-
Target
68b8275dbc00848a55e3318d92106caf34d02c7f2906dd5f42ec54d17f76cb22
-
Size
2.2MB
-
MD5
c9c83cb872e16f49fb7cdc15ac9b701f
-
SHA1
e60dc9c66f47f6c6abe0ff0be386ae4c6ab92f5d
-
SHA256
68b8275dbc00848a55e3318d92106caf34d02c7f2906dd5f42ec54d17f76cb22
-
SHA512
47cfa23405afe5cb23491cb67e6fc0d47d67038de182360eadb37662d773f493a0824cded3084ae117e87a8250eaba866c5351d8f88645913179a9bb58d45fe5
-
SSDEEP
49152:+N/xs6uSmvJ0hSRLgK/Ci+YK+rxLuGvjsuAubKJ:+FmvJdRLDCByLuKjRY
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Deletes itself
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-