Analysis

  • max time kernel
    171s
  • max time network
    179s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/12/2023, 23:09

General

  • Target

    feeb736dcb42b9182ba33eeb6449118c.exe

  • Size

    5.8MB

  • MD5

    feeb736dcb42b9182ba33eeb6449118c

  • SHA1

    fe8bf7150cf3ac66a9ee921de30e13e385ad2ff3

  • SHA256

    7fd57ff73c11a7ae9456a5afc91f8d28c10015902473dd65618f09fff6e24b60

  • SHA512

    de27807e8a986a8c65a7c8dffbd6c288e974f7146951671cfd87bd78087702edb85ed26617b1aa31e61c3bbc8565eefdaf08538e36f7d154021460f2637a9cf7

  • SSDEEP

    98304:uCcp6Zf6OCJbAbDXZFh9zv9GA3w+/FUNQZ+UAt8Bj8SQ:uPXuplv9GAfueZ+UAt6y

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • Loads dropped DLL 2 IoCs
  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\feeb736dcb42b9182ba33eeb6449118c.exe
    "C:\Users\Admin\AppData\Local\Temp\feeb736dcb42b9182ba33eeb6449118c.exe"
    1⤵
    • Loads dropped DLL
    PID:4124

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\59df31f5-f806-4a55-bbf9-ce1d09150ecc\htmlayout.dll

          Filesize

          85KB

          MD5

          dd1a206117d11446780e74a0019a15e5

          SHA1

          fae6036a1801144c07ca4d0a3c3ae4ea180b6acf

          SHA256

          c17f48f1f24ea9aa469b3643ac31b1207b0700b22e8234ebd8c60e7a1af368e0

          SHA512

          388290e34e45040561d81e73feafc82ec3cd0168bff8cf380999bff3c261955ba1bc9d83ded8a9d6e13b2ee602cddcf03c757a5394ab61fa07d2ae1c75a8d914

        • C:\Users\Admin\AppData\Local\Temp\5f081c0d-98f6-4bf9-8954-8e54f1332b1b\Statistics.dll

          Filesize

          32KB

          MD5

          69a0cffd373fb020a311205fa93ff20f

          SHA1

          2f44f2221712e3c1f77713c8ba2000a179d454c3

          SHA256

          5333da95e90baf50da39dd0c004ca9b4d46e72cb0e25f02bbc93c3fed7847e96

          SHA512

          0aeecd4bc3268bf01cedf85fac41de4e3c1b7c5d51024a78bf8acc2490cd2bf2c18aed92152ee39b644f4d87a0eaf275646c52ffb52449c6589958e1d9de5156

        • memory/4124-4-0x0000000010000000-0x0000000010261000-memory.dmp

          Filesize

          2.4MB

        • memory/4124-12-0x0000000010000000-0x0000000010261000-memory.dmp

          Filesize

          2.4MB

        • memory/4124-25-0x0000000010000000-0x0000000010261000-memory.dmp

          Filesize

          2.4MB