Analysis
-
max time kernel
141s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
30/08/2023, 21:08
General
-
Target
db8cea6eccd255f147fb32362503ff76401cfd112e2124a3797d56a45e746fa3.exe
-
Size
1.9MB
-
MD5
5870478eb370a28d6720308419cb3947
-
SHA1
2b8bcd265f956f8e1880867f3b5f9bd59c443968
-
SHA256
db8cea6eccd255f147fb32362503ff76401cfd112e2124a3797d56a45e746fa3
-
SHA512
31ac08756f46682812a79a56fad468696d5d3739a3011efab8a496e2d0cea1eabe22b9a5e561452626d8a1b49f772f07c885e711c20793df417e3b4a10bcd965
-
SSDEEP
49152:VXIyls4BMEg9WCsVb6KUpZ+hDg1F2d6n4Od:u4s4BM15SbWf+YFCE4k
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
-
Loads dropped DLL 1 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\db8cea6eccd255f147fb32362503ff76401cfd112e2124a3797d56a45e746fa3.exe"C:\Users\Admin\AppData\Local\Temp\db8cea6eccd255f147fb32362503ff76401cfd112e2124a3797d56a45e746fa3.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
804KB
MD5c578b6820bda5689940560147c6e5ffc
SHA1922e50d89c9c44bdc205ef17aa57212b64e58852
SHA2563b6ddc32b800a18b21a819e842cbfdd57cb065fd92cc69545e0ef29b97cfd389
SHA5129f2a1bb5788ad245242d12968bbf198af2694a87c6e2342f14672e8c14e8489dd3319434592fc9b20f620557d0fa58482903d19c7f5ba32456a1e4076dc1bb85
-
Filesize
152KB
-
Filesize
1.5MB
-
Filesize
572KB
-
Filesize
152KB
-
Filesize
1.5MB