Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    10/03/2024, 18:41

General

  • Target

    052cdcb84ceec21b0a524cf0a1d99eb944f7de8d34dd02aef3ea285be38898d5.exe

  • Size

    242KB

  • MD5

    f4bb8661f2c7999bac0e3c3cf852281a

  • SHA1

    33a4d55111b50de954d7a9f862acf4e152715fdb

  • SHA256

    052cdcb84ceec21b0a524cf0a1d99eb944f7de8d34dd02aef3ea285be38898d5

  • SHA512

    22d17e6e644dc70b7a6598877626fefa9d85b622068b94e3b27e10a8717c798d92d2e7263bd726d7b0b6c085c46b4aeec1ea5bf5de13a0c3d2a632cf70d49779

  • SSDEEP

    6144:bHzLFuwl8mHruEjoW/Qpxi9o5EEnUFdJQmGoYvi25ZLd:bHzJuwl8mp/1ZAoYX5ZR

Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • Loads dropped DLL 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\052cdcb84ceec21b0a524cf0a1d99eb944f7de8d34dd02aef3ea285be38898d5.exe
    "C:\Users\Admin\AppData\Local\Temp\052cdcb84ceec21b0a524cf0a1d99eb944f7de8d34dd02aef3ea285be38898d5.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:2368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\hblD4A.tmp

    Filesize

    64KB

    MD5

    fc37f0671d014361de2df38cd026c93d

    SHA1

    a8f7bda31843151baa7dd2ce2e62c6436e47207b

    SHA256

    97dc0f0f94f0a34ecc798b3b4c0e7be9683cd5bb327048f631b863eb0ffeeef9

    SHA512

    257e9878bdb32bf77eac30d431fe085991f7a396c32dc194b894de51029e34255a1c7fa6b6e5c2bf18f33d37f361349de99462dc3f618d11b90c1fa1550247c2

  • memory/2368-0-0x0000000000400000-0x0000000000417000-memory.dmp

    Filesize

    92KB

  • memory/2368-4-0x0000000000260000-0x00000000002D3000-memory.dmp

    Filesize

    460KB

  • memory/2368-6-0x0000000000400000-0x0000000000417000-memory.dmp

    Filesize

    92KB

  • memory/2368-5-0x0000000000260000-0x00000000002D3000-memory.dmp

    Filesize

    460KB