Analysis
-
max time kernel
148s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
29-11-2022 07:30
Static task
static1
Behavioral task
behavioral1
Sample
c1a7bd12b42f30d888a4f9677f8be8a4f91a5ed3a26d1166fcb55a33c6160a22.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c1a7bd12b42f30d888a4f9677f8be8a4f91a5ed3a26d1166fcb55a33c6160a22.exe
Resource
win10v2004-20220812-en
General
-
Target
c1a7bd12b42f30d888a4f9677f8be8a4f91a5ed3a26d1166fcb55a33c6160a22.exe
-
Size
249KB
-
MD5
015822af1763af11496b59c3991f0127
-
SHA1
9d724c7e91cf821a21a4a801cb093d2fc1c0d857
-
SHA256
c1a7bd12b42f30d888a4f9677f8be8a4f91a5ed3a26d1166fcb55a33c6160a22
-
SHA512
f885af30c4ec7b3d80dfca853e8f0de2a34c106591255b63978812029c0bd20ebeb542bd75542509ec02d1f435d009e36b3030b866a515aa82bc9882144252f6
-
SSDEEP
6144:cQVNGn9ztM+P4z3zhrWEFakW25jvuEl9liL:c2NG9JZPm3NrWE7j2g9e
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 2 IoCs
Detects file using ACProtect software.
resource yara_rule behavioral2/files/0x0006000000022e0b-133.dat acprotect behavioral2/files/0x0006000000022e0b-134.dat acprotect -
Loads dropped DLL 2 IoCs
pid Process 1940 c1a7bd12b42f30d888a4f9677f8be8a4f91a5ed3a26d1166fcb55a33c6160a22.exe 1940 c1a7bd12b42f30d888a4f9677f8be8a4f91a5ed3a26d1166fcb55a33c6160a22.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1940 c1a7bd12b42f30d888a4f9677f8be8a4f91a5ed3a26d1166fcb55a33c6160a22.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
172KB
MD54f407b29d53e9eb54e22d096fce82aa7
SHA1a4ee25b066cac19ff679dd491f5791652bb71185
SHA256cf0ecf30fc95800a34105acb9bcb484bb594a35b3ef26ace8f122af4f9f888dc
SHA512325f7b599455195101e4c0dafd3654906d20ed2c1ce2a5f38784635e16ab545df6ee44a83bed6128239be2dee5be110552c7b246b7f52482ab31552e14b54183
-
Filesize
172KB
MD54f407b29d53e9eb54e22d096fce82aa7
SHA1a4ee25b066cac19ff679dd491f5791652bb71185
SHA256cf0ecf30fc95800a34105acb9bcb484bb594a35b3ef26ace8f122af4f9f888dc
SHA512325f7b599455195101e4c0dafd3654906d20ed2c1ce2a5f38784635e16ab545df6ee44a83bed6128239be2dee5be110552c7b246b7f52482ab31552e14b54183