Analysis
-
max time kernel
63s -
max time network
162s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
26/12/2023, 02:18
General
-
Target
163Album/163Album.exe
-
Size
322KB
-
MD5
22c7ceaa75c5fa091897f7ad19052687
-
SHA1
3f2dda4bb9c52f3bc74e9ed2952ef4a856723c81
-
SHA256
4c64d73a880d7958c52b32dfef6c3367aca2601acbf98274ed80424f35fbc7d2
-
SHA512
8e9e9cd4376d2e3f0cb2ae60ff5890e0e29b12a82b54e699c8ba1ce8ce7ed6b3c90ba8e6ece87a113970f04804aa33b1b91c6cdde0e45cd7f29dcdefc154d2c1
-
SSDEEP
6144:d0WivUwsG+0u1pstZe6o+VHhTIqjq+6H5X1H9v3qkouI4qT:RiVs3H/sHe6o+Nhnu+6ZH3qkxu
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
-
Loads dropped DLL 1 IoCs
-
UPX packed file 6 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
-
Suspicious use of SetWindowsHookEx 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\163Album\163Album.exe"C:\Users\Admin\AppData\Local\Temp\163Album\163Album.exe"1⤵
- Loads dropped DLL
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
MD57ef3e33b78519952f3addca0b47c8ec7
SHA1fe0bf7fe87f70eea42c67161ad41f806b41a5a01
SHA2560f94dd004bfd5d559a57c66bd34dd2f6975974a262d28e7a14f946632cb83984
SHA512b2ac389e88f534b1c1bbae1f8276571ae956539b085411a567c71ee0abd8b6c290762066d12ce39101e6d1415dc58240250b89d51441c743f14ef33a6550f97e
-
Filesize
628KB
-
Filesize
220KB
-
Filesize
220KB
-
Filesize
220KB
-
Filesize
628KB