Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25-12-2023 06:37
Static task
static1
Behavioral task
behavioral1
Sample
0c15a3f53629521751355cd9c17a9c23.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0c15a3f53629521751355cd9c17a9c23.exe
Resource
win10v2004-20231215-en
General
-
Target
0c15a3f53629521751355cd9c17a9c23.exe
-
Size
284KB
-
MD5
0c15a3f53629521751355cd9c17a9c23
-
SHA1
27818e12001808d37a4b4508e64a1956cb7779f7
-
SHA256
13584a7184b2e0c89a4e7289702f2935b65a108933342224c0b4a65d5ccc5ec9
-
SHA512
cee9962610db07c7129a0750884c63e6745be11f5d6ef608908c2ec3fdd584e5aa06f5f68deacd838f470807a67667c7b53682a5fd0f604d5c8ed99d47b1075f
-
SSDEEP
3072:KFXoDt6QAmP/NO4v4ZkxhJrl+bAFvxoJSdvi8LPkmSXC+Q+CsG4u8GPMUIoDHG1E:rAQnIaoY3l+bMaJC8mS9xCs/i5TmcoU
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 2 IoCs
Detects file using ACProtect software.
resource yara_rule behavioral2/files/0x0007000000023201-2.dat acprotect behavioral2/memory/4944-65-0x0000000073B30000-0x0000000073B39000-memory.dmp acprotect -
Loads dropped DLL 16 IoCs
pid Process 4944 0c15a3f53629521751355cd9c17a9c23.exe 4944 0c15a3f53629521751355cd9c17a9c23.exe 4944 0c15a3f53629521751355cd9c17a9c23.exe 4944 0c15a3f53629521751355cd9c17a9c23.exe 4944 0c15a3f53629521751355cd9c17a9c23.exe 4944 0c15a3f53629521751355cd9c17a9c23.exe 4944 0c15a3f53629521751355cd9c17a9c23.exe 4944 0c15a3f53629521751355cd9c17a9c23.exe 4944 0c15a3f53629521751355cd9c17a9c23.exe 4944 0c15a3f53629521751355cd9c17a9c23.exe 4944 0c15a3f53629521751355cd9c17a9c23.exe 4944 0c15a3f53629521751355cd9c17a9c23.exe 4944 0c15a3f53629521751355cd9c17a9c23.exe 4944 0c15a3f53629521751355cd9c17a9c23.exe 4944 0c15a3f53629521751355cd9c17a9c23.exe 4944 0c15a3f53629521751355cd9c17a9c23.exe -
resource yara_rule behavioral2/memory/4944-10-0x0000000075250000-0x000000007525A000-memory.dmp upx behavioral2/files/0x0007000000023201-2.dat upx behavioral2/memory/4944-65-0x0000000073B30000-0x0000000073B39000-memory.dmp upx -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).