Analysis
-
max time kernel
142s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
09-10-2023 03:24
General
-
Target
af2666e561cdb39465c7e27f9e6fb714e36fba968fb3e9ef36f624ed219f955b.exe
-
Size
1.6MB
-
MD5
1f4f9925a6229e1684097a538a476b96
-
SHA1
2a3ab4d9e28a807528cbb863d82c8793079c1e0e
-
SHA256
af2666e561cdb39465c7e27f9e6fb714e36fba968fb3e9ef36f624ed219f955b
-
SHA512
40f94b985017e0dc813e128cec7b97558f01d305431781819f5877289097e3cd107b28e19d7e3ab59c0ca6a19d2f7451f0c9d9c8d0afe6697a41727bd255cac7
-
SSDEEP
24576:+fHR3PXx7DzZClr/Cy/1taYuE79yjJ8P96k710NZ5iHuBRO8nJsiJkcLV7IDyZ:+Vslrz/raYuE54J8wMwZ5FOqTxV
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 2 IoCs
Detects file using ACProtect software.
-
Loads dropped DLL 1 IoCs
-
UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Program crash 2 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\af2666e561cdb39465c7e27f9e6fb714e36fba968fb3e9ef36f624ed219f955b.exe"C:\Users\Admin\AppData\Local\Temp\af2666e561cdb39465c7e27f9e6fb714e36fba968fb3e9ef36f624ed219f955b.exe"1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3056 -s 7242⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3056 -s 7242⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3056 -ip 30561⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 3056 -ip 30561⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
86KB
MD5147127382e001f495d1842ee7a9e7912
SHA192d1ed56032183c75d4b57d7ce30b1c4ae11dc9b
SHA256edf679c02ea2e170e67ab20dfc18558e2bfb4ee5d59eceeaea4b1ad1a626c3cc
SHA51297f5ae90a1bbacfe39b9e0f2954c24f9896cc9dca9d14364c438862996f3bbc04a4aa515742fccb3679d222c1302f5bb40c7eaddd6b5859d2d6ef79490243a4d
-
Filesize
86KB
MD5147127382e001f495d1842ee7a9e7912
SHA192d1ed56032183c75d4b57d7ce30b1c4ae11dc9b
SHA256edf679c02ea2e170e67ab20dfc18558e2bfb4ee5d59eceeaea4b1ad1a626c3cc
SHA51297f5ae90a1bbacfe39b9e0f2954c24f9896cc9dca9d14364c438862996f3bbc04a4aa515742fccb3679d222c1302f5bb40c7eaddd6b5859d2d6ef79490243a4d
-
Filesize
3.6MB
-
Filesize
256KB
-
Filesize
4KB
-
Filesize
3.6MB
-
Filesize
3.6MB
-
Filesize
3.6MB
-
Filesize
3.6MB
-
Filesize
3.6MB
-
Filesize
256KB
-
Filesize
3.6MB
-
Filesize
244KB
-
Filesize
256KB
-
Filesize
3.6MB
-
Filesize
244KB