Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
25-12-2023 19:42
Static task
static1
Behavioral task
behavioral1
Sample
38d9a1a9ed74d4d6ee5252128fce9c21.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
38d9a1a9ed74d4d6ee5252128fce9c21.exe
Resource
win10v2004-20231215-en
General
-
Target
38d9a1a9ed74d4d6ee5252128fce9c21.exe
-
Size
469KB
-
MD5
38d9a1a9ed74d4d6ee5252128fce9c21
-
SHA1
1e7961985196a1c2db5b18cce05d5e936fa605b2
-
SHA256
105ffc97af284375e0c336f7d283c837e2e4ba90ff1c38b7f22f79d180b4512a
-
SHA512
fd2cbbc51ebf0d3f5b8e6e007cd79cc64f311d2fe0c15c760f625a72b212cbc4d4e27992f9db938debaebca528bb9a6ec01372e27db5249bb53d51f59ea93b93
-
SSDEEP
12288:eCx7cJiHfqzI3HzlEo3/m19D3dNO5E1YU/:eCNcJ8qzuvvsDdgbu
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule behavioral1/files/0x000b000000012267-2.dat acprotect -
Loads dropped DLL 1 IoCs
pid Process 1320 38d9a1a9ed74d4d6ee5252128fce9c21.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1320 38d9a1a9ed74d4d6ee5252128fce9c21.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
172KB
MD5685f1cbd4af30a1d0c25f252d399a666
SHA16a1b978f5e6150b88c8634146f1406ed97d2f134
SHA2560e478c95a7a07570a69e6061e7c1da9001bccad9cc454f2ed4da58824a13e0f4
SHA5126555ad6b4f4f26105ca8aad64501d74519a3e091f559b4b563d6ffb20a2ddfcde65e4fe94971a9bc65e86db577f2548ca00f9920d341c8ea808b04c0947d61d9