Analysis

  • max time kernel
    150s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 19:32

General

  • Target

    38356037cf8ed5a133f9697e8012a365.exe

  • Size

    81KB

  • MD5

    38356037cf8ed5a133f9697e8012a365

  • SHA1

    3fbf3cd648ba1c8592f28f063d23b9e1790e4d0c

  • SHA256

    e233f64148e06c1d35a4b3bf31113bb2536ab9dd025a3b5b7d8c71da97722a3e

  • SHA512

    7277fcad006766644910cd92b9f0631a538fd214a02ef395a3d67679d3e3f1afcf545d3f1c25aa9f8c2b1c5aa26d3e315fa9e7aee1fe7701ed05b5a2b77f9294

  • SSDEEP

    1536:j/neRC5/wmroN04LYWC1CblMCn5uDI6tlRh7gZVv2MAH6+gx5r:f5omrPkounIsYRhcGMzb

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • Loads dropped DLL 1 IoCs
  • Drops file in System32 directory 1 IoCs
  • Drops file in Windows directory 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\38356037cf8ed5a133f9697e8012a365.exe
    "C:\Users\Admin\AppData\Local\Temp\38356037cf8ed5a133f9697e8012a365.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    • Drops file in Windows directory
    • Suspicious use of SetWindowsHookEx
    PID:2852

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Windows\SysWOW64\s32kcp.dll

    Filesize

    22KB

    MD5

    2a49b50ef5d7b0add47f7318de5655cb

    SHA1

    88824905ecdbee1d1b104d84098e6d31b5441ffb

    SHA256

    daa77961614405b008b427263fe46c8db004e3cf637659aa94b2325332d207e9

    SHA512

    19ec41d781b269fa1e724e01f9ca6ba6fb63a8c93f313f1b688ede2eddae8b5dedd38d63451ddff05c448e845e0e2fe863b2a55276d12b6520406ea8760ae031

  • memory/2852-0-0x0000000000400000-0x000000000043D000-memory.dmp

    Filesize

    244KB

  • memory/2852-6-0x0000000010000000-0x0000000010015000-memory.dmp

    Filesize

    84KB

  • memory/2852-9-0x0000000010000000-0x0000000010015000-memory.dmp

    Filesize

    84KB

  • memory/2852-8-0x0000000000400000-0x000000000043D000-memory.dmp

    Filesize

    244KB

  • memory/2852-13-0x0000000010000000-0x0000000010015000-memory.dmp

    Filesize

    84KB