Analysis
-
max time kernel
27s -
max time network
30s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
02-02-2023 19:24
General
-
Target
717b16a18aed777fcc4cdf2ea6f40311dcf2f14092ac2c55421059d6b9720c2a.exe
-
Size
5.4MB
-
MD5
44e7009e1d92b07c6891c48d2df04ea9
-
SHA1
882861ca206ef2c60020c625a1b79c9d5153d288
-
SHA256
717b16a18aed777fcc4cdf2ea6f40311dcf2f14092ac2c55421059d6b9720c2a
-
SHA512
e088d91d5f09f64d9e78ef980a85e4f07e480a24e895576f60b1ce74253ef4717cad1a1fbb1192d583532318167b2f8927ed180411a7bb30e7440ec27b1070c1
-
SSDEEP
98304:LctnG6nIO01n3xUKSbe6TcOK2ifvXHwNudBYo3:AtGjT1x/EevOKXmYF
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 2 IoCs
Detects file using ACProtect software.
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 6 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\717b16a18aed777fcc4cdf2ea6f40311dcf2f14092ac2c55421059d6b9720c2a.exe"C:\Users\Admin\AppData\Local\Temp\717b16a18aed777fcc4cdf2ea6f40311dcf2f14092ac2c55421059d6b9720c2a.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-A8JUS.tmp\717b16a18aed777fcc4cdf2ea6f40311dcf2f14092ac2c55421059d6b9720c2a.tmp"C:\Users\Admin\AppData\Local\Temp\is-A8JUS.tmp\717b16a18aed777fcc4cdf2ea6f40311dcf2f14092ac2c55421059d6b9720c2a.tmp" /SL5="$70124,5336921,171008,C:\Users\Admin\AppData\Local\Temp\717b16a18aed777fcc4cdf2ea6f40311dcf2f14092ac2c55421059d6b9720c2a.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
814KB
MD5d3f54a81b5eaae8f734e4b63860bd8a1
SHA10b87f379d03307463f30d27b3e805e3103cabdf5
SHA256837497688ed2168fce151fddc40193d9df639d094edf2ae8cf43ec41f8c6119a
SHA512741820a719628edc1b2c73e63cc7d0510c1a9389a44a7a2849605e9240278b43b447b7159a4307783a688938abef0844ff661afab40b6e39756646e132550177
-
Filesize
814KB
MD5d3f54a81b5eaae8f734e4b63860bd8a1
SHA10b87f379d03307463f30d27b3e805e3103cabdf5
SHA256837497688ed2168fce151fddc40193d9df639d094edf2ae8cf43ec41f8c6119a
SHA512741820a719628edc1b2c73e63cc7d0510c1a9389a44a7a2849605e9240278b43b447b7159a4307783a688938abef0844ff661afab40b6e39756646e132550177
-
Filesize
379KB
MD5a80a2c59aad01a5bd369d479f4f3cf3d
SHA1c01b281cdaeba9f468c18185e6f01f78a0abf287
SHA256282f40ed72cfc801ef88ab72a80c8824957aa554ece3b74842b48ecedfcf4755
SHA512db67c30e07245e1e0ee5514faf35f6fdfd94a2884cdf82f7daba1eac571067448483b5564f758e273a57ae020941322c2174827ffef1915fc37a74f0fda2d39d
-
Filesize
112KB
MD55b1e5a0221a7e7ab846bf6344f34c887
SHA169268a072275b4f65863efd8451986ee183f39f4
SHA2561dfe94161ba28aa79f89fe83f774ccd8bc4f96bd68816f6646b3115270e1b2f0
SHA5126ac43eeeddbf2b04b1920261cfcc28b3bdda49bbb86b3b6554ece6476a5f51777338f2dd594aa7cbfa0f693d992e037be8fd30b851c9f6f1fd821fe3b93f3c76
-
Filesize
123KB
MD5b4ae1b26b68545a823f067738a6877f9
SHA1a90a812cac906afb2fbe2a400746de67c845ecb0
SHA25657ec9023fddd0e0dedffc93bae937442eebd648a4d14383b22fb1a787582cbbc
SHA51264b6e3ac5eba6231dabe61b73feb8bbeb2015cf871858aa0163fbc84b41912f8453aa16d6939f4d82f235929dbe333c5534965ceb2c83c67720f5f336ca3ccef
-
Filesize
22KB
MD592dc6ef532fbb4a5c3201469a5b5eb63
SHA13e89ff837147c16b4e41c30d6c796374e0b8e62c
SHA2569884e9d1b4f8a873ccbd81f8ad0ae257776d2348d027d811a56475e028360d87
SHA5129908e573921d5dbc3454a1c0a6c969ab8a81cc2e8b5385391d46b1a738fb06a76aa3282e0e58d0d2ffa6f27c85668cd5178e1500b8a39b1bbae04366ae6a86d3
-
Filesize
22KB
MD592dc6ef532fbb4a5c3201469a5b5eb63
SHA13e89ff837147c16b4e41c30d6c796374e0b8e62c
SHA2569884e9d1b4f8a873ccbd81f8ad0ae257776d2348d027d811a56475e028360d87
SHA5129908e573921d5dbc3454a1c0a6c969ab8a81cc2e8b5385391d46b1a738fb06a76aa3282e0e58d0d2ffa6f27c85668cd5178e1500b8a39b1bbae04366ae6a86d3
-
Filesize
200KB
-
Filesize
1.1MB
-
Filesize
640KB
-
Filesize
572KB
-
Filesize
1.4MB
-
Filesize
348KB
-
Filesize
680KB
-
Filesize
348KB
-
Filesize
572KB
-
Filesize
348KB
-
Filesize
680KB
-
Filesize
12.3MB
-
Filesize
400KB
-
Filesize
216KB
-
Filesize
560KB
-
Filesize
200KB
-
Filesize
168KB
-
Filesize
980KB
-
Filesize
1.6MB
-
Filesize
640KB
-
Filesize
572KB
-
Filesize
1.4MB
-
Filesize
36KB
-
Filesize
1.6MB
-
Filesize
628KB
-
Filesize
12.3MB
-
Filesize
492KB
-
Filesize
524KB
-
Filesize
400KB
-
-
Filesize
228KB
-
Filesize
980KB
-
Filesize
492KB
-
Filesize
628KB
-
Filesize
348KB
-
Filesize
640KB
-
Filesize
72KB
-
Filesize
1.6MB
-
Filesize
572KB
-
Filesize
348KB
-
Filesize
1.6MB
-
Filesize
76KB
-
Filesize
524KB
-
Filesize
400KB
-
Filesize
200KB
-
Filesize
560KB
-
Filesize
228KB
-
Filesize
980KB
-
Filesize
1.6MB
-
Filesize
156KB
-
Filesize
640KB
-
Filesize
72KB
-
Filesize
36KB
-
Filesize
1.6MB
-
Filesize
348KB
-
Filesize
524KB
-
Filesize
400KB
-
Filesize
560KB
-
Filesize
200KB
-
Filesize
228KB
-
Filesize
980KB
-
Filesize
1.6MB
-
Filesize
216KB
-
Filesize
628KB
-
Filesize
640KB
-
Filesize
196KB
-
Filesize
196KB
-
Filesize
8KB