Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
01/01/2024, 12:36
General
-
Target
405a2d0027010f8e807ca9bc5ed18634a23251840069c93838d728cec972f5cd.exe
-
Size
234KB
-
MD5
80030a23150824570d0a1e6aab362539
-
SHA1
f0f189800a616edc02112010342fedad7435fafc
-
SHA256
405a2d0027010f8e807ca9bc5ed18634a23251840069c93838d728cec972f5cd
-
SHA512
cf096c9391fdce53eaeadb752484e44c9227158778aa0f4c0bc9ddf2e7990def9e7178d62bd3861b7c3d122ece7839263bbc970bdb74bf37eb5abd9c2aeaa640
-
SSDEEP
6144:IhiP/aKIp0h9H/B+buBV+UdvrEFp7hKhr3g:IIP/aKIivB+CBjvrEH7g3g
Score
7/10
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
-
Loads dropped DLL 1 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\405a2d0027010f8e807ca9bc5ed18634a23251840069c93838d728cec972f5cd.exe"C:\Users\Admin\AppData\Local\Temp\405a2d0027010f8e807ca9bc5ed18634a23251840069c93838d728cec972f5cd.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
192KB
-
Filesize
192KB
-
Filesize
164KB