Analysis
-
max time kernel
142s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
19-03-2024 10:59
General
-
Target
d5f0d2c2eb3f2b25ca62104113f0f29b.exe
-
Size
19KB
-
MD5
d5f0d2c2eb3f2b25ca62104113f0f29b
-
SHA1
dfab897342348a9679b075b4cfd66abac6575104
-
SHA256
2b32294454e81357d2ef0a75f3e76e96380823b0be7853efbc64dc6e0bb638dd
-
SHA512
58e65f774a341c449498c2bfe787749a811189708a674d13bf877b98684246605e44e74e3cddc463f7d49c6674b99701418bd51be2988471c16c2403892bae13
-
SSDEEP
384:+AX+OVBJnYNPNpfNWNr2V0jOu1yiRzC7nYT/df4UPStm7TVSMN6wkdu/:+cVBJn+N+12V2OjIzVTlN7JS2u
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
-
Loads dropped DLL 2 IoCs
-
UPX packed file 5 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d5f0d2c2eb3f2b25ca62104113f0f29b.exe"C:\Users\Admin\AppData\Local\Temp\d5f0d2c2eb3f2b25ca62104113f0f29b.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
18KB
MD5b2599f53aceb003dc75f05efef9d8061
SHA19a99a2c589081411e207f2eb5a0d7184e731b80c
SHA25697dd1b7610f2cfa60851a63ea1ed82e90529a2340c1dd1c1af2fae302eb5f446
SHA51291fdc718d8925ed70767c43aa9b227e703d21a454acd7be797527e48eab099e7851f19f4d85df4f5e6425f25fe87c821457036b2de23f6977d4c207f19f108ab
-
Filesize
96KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
96KB
-
Filesize
68KB
-
Filesize
68KB