Resubmissions
21/04/2023, 18:11
230421-wslxpahc47 321/04/2023, 17:23
230421-vylnfaha68 321/04/2023, 17:21
230421-vxcddaha62 1Analysis
-
max time kernel
147s -
max time network
36s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
21/04/2023, 17:23
General
-
Target
ACMobile.UWP_3.13.9.0_Test_indacdigital.rar
-
Size
55.1MB
-
MD5
869f3ec0e3a997c017ad3fb023a56335
-
SHA1
744b7e634556cb27fd453378d43a7a05b01255fd
-
SHA256
5fba92b48687b8cbaf19410ed222c6a77443bb146ffbcdf432c7d59381ca1567
-
SHA512
20fd75fa25ef0ccea6e2da2304eb5cea8944f544f934a927ea0ffc3db4a9ffaeb17af47243234d4997d946bf48a94a29435de878a70ba0785f5c472132e6e512
-
SSDEEP
1572864:gw9oxLW2nGTFoLlQl/i8TDy+DzTFEGUcSalKb9ghL:1oxK2zoq8S+PGG7SalKbwL
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 1 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of FindShellTrayWindow 10 IoCs
-
Suspicious use of SendNotifyMessage 9 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 6 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\ACMobile.UWP_3.13.9.0_Test_indacdigital.rar1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,OpenAs_RunDLL C:\Users\Admin\AppData\Local\Temp\ACMobile.UWP_3.13.9.0_Test_indacdigital.rar2⤵
- Modifies registry class
- Suspicious use of WriteProcessMemory
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\ACMobile.UWP_3.13.9.0_Test_indacdigital.rar"3⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
-
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
992KB
-
Filesize
208KB
-
Filesize
2.7MB
-
Filesize
96KB
-
Filesize
92KB
-
Filesize
68KB
-
Filesize
92KB
-
Filesize
68KB
-
Filesize
116KB
-
Filesize
68KB
-
Filesize
16.7MB
-
Filesize
2.0MB
-
Filesize
252KB
-
Filesize
96KB
-
Filesize
132KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
412KB
-
Filesize
68KB
-
Filesize
344KB
-
Filesize
444KB
-
Filesize
192KB
-
Filesize
96KB
-
Filesize
68KB
-
Filesize
160KB
-
Filesize
108KB
-
Filesize
144KB
-
Filesize
140KB
-
Filesize
92KB
-
Filesize
68KB
-
Filesize
132KB
-
Filesize
72KB
-
Filesize
72KB
-
Filesize
76KB
-
Filesize
176KB
-
Filesize
1.2MB
-
Filesize
1.7MB
-
Filesize
68KB
-
Filesize
368KB
-
Filesize
604KB
-
Filesize
72KB
-
Filesize
2.2MB
-
Filesize
1.1MB
-
Filesize
212KB
-
Filesize
68KB
-
Filesize
148KB
-
Filesize
388KB
-
Filesize
68KB
-
Filesize
72KB
-
Filesize
68KB
-
Filesize
636KB
-
Filesize
76KB
-
Filesize
72KB
-
Filesize
88KB
-
Filesize
96KB
-
Filesize
72KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
164KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
1.0MB