Analysis

  • max time kernel
    160s
  • max time network
    173s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/01/2024, 05:55

General

  • Target

    52b82754d055959c227ce34702731e70.exe

  • Size

    163KB

  • MD5

    52b82754d055959c227ce34702731e70

  • SHA1

    ce264c902d5500be5bbd4d433e6a79b2947fa97f

  • SHA256

    e8d29dcc6b1109fbc27b57a6887ec720ad07772d584c5fb0a2d47237b0c080df

  • SHA512

    20fbfcece5035cfc7c84dfdcbc35310cae0c41f077b1dae79dd131c9af42974c6e02c3d7795df7824cd9f0df2bef2141635575f6961a1900b66b7991b7e9fe74

  • SSDEEP

    3072:04L8emcQHPkzgrVtiblnj+Kiznnwx4vHXvFWD0bI4s2RvfY4T:04L8emsKCB4nwYw5v

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • Loads dropped DLL 1 IoCs
  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\52b82754d055959c227ce34702731e70.exe
    "C:\Users\Admin\AppData\Local\Temp\52b82754d055959c227ce34702731e70.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Windows directory
    PID:3124

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\czhoue.tmp

          Filesize

          51KB

          MD5

          319ec58928f82afaa5fa04d03197089e

          SHA1

          80c881160580d26819aedd468c84f9354607e397

          SHA256

          fdebfa949f9e97a9be26063560bd666183b1ec0f7149cff5ef92eb1f1794d52c

          SHA512

          6557be47c482079863063a5d343a9db73cf48d84ca1b946a5fae5c07353f84a634dcd14be8ca3254c4b478c793cc8f085ac8c97aefbc2ef1d48814bda1842415

        • memory/3124-6-0x0000000075790000-0x00000000757B2000-memory.dmp

          Filesize

          136KB

        • memory/3124-7-0x0000000075790000-0x00000000757B2000-memory.dmp

          Filesize

          136KB