Analysis
-
max time kernel
90s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
01-12-2022 21:28
General
-
Target
7db497f320c6c391409b1cca48e4a7f4140477d79765ddd36f9cbf3ab9fb0eb2.exe
-
Size
701KB
-
MD5
c8a4a23a871b2b7bd60d25548d53c192
-
SHA1
6767f14be3bf2badc741d779b30a3ccb93235b2b
-
SHA256
7db497f320c6c391409b1cca48e4a7f4140477d79765ddd36f9cbf3ab9fb0eb2
-
SHA512
7f252203adb8b6016e6e6b297ba6757ca142b67cd89d48a8acd5e77f1ae3db61410862c0ac9281f3c96d27738af8ea2b6d4142261772db669a5fa5e70a0ee682
-
SSDEEP
12288:goLChmKDmI9pIzGu4iW2vIU3Jtkk1f6vSmVXI+svpspUi7cUkX:uhr9ezGuE2gUZak1f6S+Asp0UkX
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7db497f320c6c391409b1cca48e4a7f4140477d79765ddd36f9cbf3ab9fb0eb2.exe"C:\Users\Admin\AppData\Local\Temp\7db497f320c6c391409b1cca48e4a7f4140477d79765ddd36f9cbf3ab9fb0eb2.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
86KB
MD5147127382e001f495d1842ee7a9e7912
SHA192d1ed56032183c75d4b57d7ce30b1c4ae11dc9b
SHA256edf679c02ea2e170e67ab20dfc18558e2bfb4ee5d59eceeaea4b1ad1a626c3cc
SHA51297f5ae90a1bbacfe39b9e0f2954c24f9896cc9dca9d14364c438862996f3bbc04a4aa515742fccb3679d222c1302f5bb40c7eaddd6b5859d2d6ef79490243a4d
-
Filesize
2.4MB
-
Filesize
2.4MB
-
Filesize
2.4MB
-
Filesize
244KB
-
Filesize
2.4MB