Analysis
-
max time kernel
148s -
max time network
90s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25-12-2023 11:44
Static task
static1
Behavioral task
behavioral1
Sample
1bb2027806662a32ae441ec942f480ca.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1bb2027806662a32ae441ec942f480ca.exe
Resource
win10v2004-20231215-en
General
-
Target
1bb2027806662a32ae441ec942f480ca.exe
-
Size
231KB
-
MD5
1bb2027806662a32ae441ec942f480ca
-
SHA1
3d3de79794a9c383d257184de76aabcf3cceffa6
-
SHA256
0685ceb9f078cca98da52e29a6ee749b17617ada292f165ae412eb68ce5647e5
-
SHA512
94652ac2c337bee48758727351d0cb514764f070b2abaa8b7a5882b70ba6c5a1db64e03bc2f7d26b872152a15650458ae5b35cfa7c72907cf77bcc7c8555099d
-
SSDEEP
6144:rFvK0aFckQ46V4nRehb+QgdG98nlpmPt5gQX:pS0aG946V4nod+Qgdtytd
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 2 IoCs
Detects file using ACProtect software.
resource yara_rule behavioral2/files/0x000300000001f45f-4.dat acprotect behavioral2/files/0x000300000001f45f-2.dat acprotect -
Loads dropped DLL 2 IoCs
pid Process 3924 1bb2027806662a32ae441ec942f480ca.exe 3924 1bb2027806662a32ae441ec942f480ca.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3924 1bb2027806662a32ae441ec942f480ca.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
17KB
MD5522d3ff889b9ff4450b7fb8d1ac3d4d0
SHA1a46fc32421e1d83c6d4fe2a399aaef24e2d51c0d
SHA256ee7158fddb75fc46d68a9724857c622e58f34f85efe318973d752629c30a2481
SHA51235355e57008c9d8c383165efec810c7d9b228970f810070d797635ffe20bb1dc611e26e86349d6748bb4725b058a7d85f15a46420ce119c790a84c4c790671b5
-
Filesize
46KB
MD5678aec05f32431f8db4b5b27c2151dcc
SHA184311c4ecfead209914d7e37488dea5ffe11e060
SHA256b46ab7fb9c4b32d654f88ac315fabc9f798794529fbc245b4bcd999cd20dab9c
SHA51249d587ccb4611424252056125cb32d6e3aaf54573b218679ab0c5d7f01c844db54b2fdfec2e9675d467ad061cc871a8245648ac5a0626b37e42e4c5d81582f89