Analysis
-
max time kernel
141s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system -
submitted
23/11/2023, 04:00
Static task
static1
Behavioral task
behavioral1
Sample
282965a1680cb0ca2ca28ae0979f61a6051a29ee0b358b67d3b9a979e4691935.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
282965a1680cb0ca2ca28ae0979f61a6051a29ee0b358b67d3b9a979e4691935.exe
Resource
win10v2004-20231023-en
General
-
Target
282965a1680cb0ca2ca28ae0979f61a6051a29ee0b358b67d3b9a979e4691935.exe
-
Size
540KB
-
MD5
edb019df7e0fae9326b3864819447e8e
-
SHA1
4ded0d9e87340c11007a40903a3dd94db8ba1d7c
-
SHA256
282965a1680cb0ca2ca28ae0979f61a6051a29ee0b358b67d3b9a979e4691935
-
SHA512
2949efc0c250abdafd826cdfdfa0f8c84bb2f4a5f4de2948d439e23ecc0e9bad03edb5053fe316c7abfec1266b56bbee3bac1750498d3e90e5d60563d00970b3
-
SSDEEP
12288:3GFmqIrdk3QpwU5+7ferUyHctGhgDxna1Jk4CcZXOE:WCrCgwU5Ofe4yHT+Dxank41
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule behavioral1/files/0x00080000000120ca-2.dat acprotect -
Loads dropped DLL 1 IoCs
pid Process 2088 282965a1680cb0ca2ca28ae0979f61a6051a29ee0b358b67d3b9a979e4691935.exe -
resource yara_rule behavioral1/files/0x00080000000120ca-2.dat upx behavioral1/memory/2088-4-0x0000000000260000-0x0000000000285000-memory.dmp upx behavioral1/memory/2088-6-0x0000000000260000-0x0000000000285000-memory.dmp upx
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
50KB
MD5531ba14ecaf329ba03a3c999ebd8ea55
SHA1353dfeb54480a9dd9dfcab5ca23688c677b46816
SHA2568f00b2c26728247fbee27ad5979f611adb1098f1acd2c15917c37666616fdcad
SHA512fe817ac30ebf42b253e5f9b78e5ec884c49e01e1768500e60148c36ea026ed70b7953cbb6aaf5fb272e8b981743f3cbec0d49bce5f829d0db416b3e8ae4e3e0f