Analysis
-
max time kernel
140s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
04-02-2024 04:59
Static task
static1
Behavioral task
behavioral1
Sample
8e460d3ce31bbf5d216923f45cffff16.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8e460d3ce31bbf5d216923f45cffff16.exe
Resource
win10v2004-20231215-en
General
-
Target
8e460d3ce31bbf5d216923f45cffff16.exe
-
Size
14KB
-
MD5
8e460d3ce31bbf5d216923f45cffff16
-
SHA1
0abca9c958c6fdd7beaba44842dbbc022568f6e8
-
SHA256
36bde2a51de3f9cf22fe7fb5d6175eea91a59c16c3e06984eed30dc5abb7b957
-
SHA512
883033cb78dec3bbdbd6298d743e3e6b691a6ded448cfbdfb794e38ab12678f29d865853b3dcc4d92d1728f015db61cbe051342fa28967df70431275b209bb2d
-
SSDEEP
384:rtdfEobs+DmH1cIiLingoaMPqyORYLK6h+3:BdEobVDmHOIiLingoaMPKt
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule behavioral1/files/0x000b000000012242-4.dat acprotect -
Loads dropped DLL 1 IoCs
pid Process 2440 8e460d3ce31bbf5d216923f45cffff16.exe -
resource yara_rule behavioral1/files/0x000b000000012242-4.dat upx behavioral1/memory/2440-6-0x00000000002A0000-0x00000000002AE000-memory.dmp upx -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\8e460d3ce31bbf5d216923f45cffff16tp.dll 8e460d3ce31bbf5d216923f45cffff16.exe File opened for modification C:\Windows\SysWOW64\8e460d3ce31bbf5d216923f45cffff16tp.dll 8e460d3ce31bbf5d216923f45cffff16.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2440 8e460d3ce31bbf5d216923f45cffff16.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
11KB
MD515d517e2341c60780862ca57cb61d6fa
SHA144b7da703c87aea794936b8758f1646ed09479fe
SHA256aa7c33bac6ae9ed1076bd9309ee5b3f2ed3a8ec47a5e2a06e07e050accbc4519
SHA512272537e1be3671982ff4281c12359b6eb28b64de82b115500c9b2337f04fd4d4221fefa8f6df80c3655a486f2904f68a23e9a5ae4d22aa8efbf967852dc2a67a