Analysis
- max time kernel
134s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
30/12/2023, 02:12
General
- Target 0b41580580ca72b4cf90b11383ba102a.exe
- Size 1.7MB
- Sample231230-cm9a9accd8
- SHA256 f01e306758b16573e22ba70b4b243a0838951f7bdac22005ee4c8d2069ffae3e
Score
7/10
Malware Config
Signatures
- ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
- Loads dropped DLL 7 IoCs
- UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\0b41580580ca72b4cf90b11383ba102a.exe"C:\Users\Admin\AppData\Local\Temp\0b41580580ca72b4cf90b11383ba102a.exe"1⤵
- Loads dropped DLL
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
LangDLL.dll
System.dll
nsDialogs.dll
nsRandom.dll
memory/4896-28-0x0000000003350000-0x0000000003362000-memory.dmp
memory/4896-29-0x0000000003350000-0x0000000003362000-memory.dmp
memory/4896-46-0x0000000003350000-0x0000000003362000-memory.dmp
memory/4896-47-0x0000000003350000-0x0000000003362000-memory.dmp