Analysis
-
max time kernel
150s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
25/12/2023, 19:32
Static task
static1
Behavioral task
behavioral1
Sample
38356037cf8ed5a133f9697e8012a365.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
38356037cf8ed5a133f9697e8012a365.exe
Resource
win10v2004-20231215-en
General
-
Target
38356037cf8ed5a133f9697e8012a365.exe
-
Size
81KB
-
MD5
38356037cf8ed5a133f9697e8012a365
-
SHA1
3fbf3cd648ba1c8592f28f063d23b9e1790e4d0c
-
SHA256
e233f64148e06c1d35a4b3bf31113bb2536ab9dd025a3b5b7d8c71da97722a3e
-
SHA512
7277fcad006766644910cd92b9f0631a538fd214a02ef395a3d67679d3e3f1afcf545d3f1c25aa9f8c2b1c5aa26d3e315fa9e7aee1fe7701ed05b5a2b77f9294
-
SSDEEP
1536:j/neRC5/wmroN04LYWC1CblMCn5uDI6tlRh7gZVv2MAH6+gx5r:f5omrPkounIsYRhcGMzb
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule behavioral1/files/0x0007000000015c6f-4.dat acprotect -
Loads dropped DLL 1 IoCs
pid Process 2852 38356037cf8ed5a133f9697e8012a365.exe -
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\SysWOW64\s32kcp.dll 38356037cf8ed5a133f9697e8012a365.exe -
Drops file in Windows directory 2 IoCs
description ioc Process File opened for modification C:\Windows\vknt.cfg 38356037cf8ed5a133f9697e8012a365.exe File created C:\Windows\vknt.tmp 38356037cf8ed5a133f9697e8012a365.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2852 38356037cf8ed5a133f9697e8012a365.exe 2852 38356037cf8ed5a133f9697e8012a365.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
22KB
MD52a49b50ef5d7b0add47f7318de5655cb
SHA188824905ecdbee1d1b104d84098e6d31b5441ffb
SHA256daa77961614405b008b427263fe46c8db004e3cf637659aa94b2325332d207e9
SHA51219ec41d781b269fa1e724e01f9ca6ba6fb63a8c93f313f1b688ede2eddae8b5dedd38d63451ddff05c448e845e0e2fe863b2a55276d12b6520406ea8760ae031