Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
19/01/2024, 09:34
General
-
Target
k9-webprotection (free).exe
-
Size
234KB
-
MD5
21d6ef964a57d79b95db10b64b57df7d
-
SHA1
1fb368f6c7942e6bdcadae8b2a73dd0338290e4d
-
SHA256
a42272bf5ccd6009afde200338afe8e0b2a54e1ba6d3094f43375d11f3bf41d6
-
SHA512
0b7302bddf5a8ae5843334d1df895b62bbde0161bf0b686caacdce894358cc33e298418051cb76312d285afe5e1312840155250893a86993201956b4e58996be
-
SSDEEP
3072:epBCRdma8J2xBfPP011TwFaMHL8YLn9yG6ruelgx+IC2FybGYdXM5Fad+gwGW:uBwlT015UwYByG6ruelTIC2cbGGcT/t
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
-
Loads dropped DLL 3 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\k9-webprotection (free).exe"C:\Users\Admin\AppData\Local\Temp\k9-webprotection (free).exe"1⤵
- Loads dropped DLL
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9KB
MD5afd989ef7eec6bf952bedfce541fe236
SHA15654b71c5b1089c2cec6381d8da5bd14a14e1a37
SHA2565e97602008ba004c72d58f71e77ffe0a0ea01103867eb12a9ec0f28e72f440d8
SHA512f4e3d88477d39218667dd482a08904b2b69435db7d1fdd492380544aff83895d393a288c329da69074b69c68f51db45f694dfea81fc12fa2042ed43b3d06440c
-
Filesize
6KB
MD5ebc5bb904cdac1c67ada3fa733229966
SHA13c6abfa0ddef7f3289f38326077a5041389b15d2
SHA2563eba921ef649b71f98d9378dee8105b38d2464c9ccde37a694e4a0cd77d22a75
SHA512fa71afcc166093fbd076a84f10d055f5a686618711d053ab60d8bd060e78cb2fdc15fa35f363822c9913413251c718d01ddd6432ab128816d98f9aabf5612c9f
-
Filesize
48KB
-
Filesize
8KB