Analysis
-
max time kernel
1792s -
max time network
1562s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
26-03-2024 16:54
General
-
Target
f0c292785905838d08b27bb99ab260b43fd8de580de80017fdaaab3c3d53d8a6.exe
-
Size
7.0MB
-
MD5
3beee8d7f55cd8298fcb009aa6ef6aae
-
SHA1
672a992ea934a0cba07ca07b80b62493e95c584d
-
SHA256
f0c292785905838d08b27bb99ab260b43fd8de580de80017fdaaab3c3d53d8a6
-
SHA512
12bd64d10620c1952127c125e7beb21b3727d8afb6440d48058785267b227a534ee6112d84372749496481cb6edb5c90eeb159689b443fe0f10f4a9202a83a5f
-
SSDEEP
196608:gUWfTu5s5E6s6eLL1mkJ2Z9Jq5dOYo+SJVTXOD0ch:gUWfTuK5E6s6sBmKk9JMo5/eN
Malware Config
Signatures
-
Renames multiple (60) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
ACProtect 1.3x - 1.4x DLL software 22 IoCs
Detects file using ACProtect software.
-
Loads dropped DLL 22 IoCs
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
UPX packed file 64 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f0c292785905838d08b27bb99ab260b43fd8de580de80017fdaaab3c3d53d8a6.exe"C:\Users\Admin\AppData\Local\Temp\f0c292785905838d08b27bb99ab260b43fd8de580de80017fdaaab3c3d53d8a6.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\f0c292785905838d08b27bb99ab260b43fd8de580de80017fdaaab3c3d53d8a6.exe"C:\Users\Admin\AppData\Local\Temp\f0c292785905838d08b27bb99ab260b43fd8de580de80017fdaaab3c3d53d8a6.exe"2⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5ed09f4127e27f4a9c806e2c4c79d455c
SHA188b257aaa5fee787ec388976bd3de3c9c468a981
SHA25697f892c90ffb1978df13e22a6768a424e95793314c89427a063223634cdd3c00
SHA512b6732ced3b76633dc899fd9a8f7f89c8d89f7d2392aeeac8bceb6c66357952ac0667aee8d637d7a93aa1a807f5820114f4ad0386f80cdcdf3350c4408352ed3f
-
Filesize
879KB
MD5f3caec450b53d793c44bf5b1c6d202d5
SHA1e156b4c6284a7b493febc956014de524b157ab4f
SHA256ddacdf039b0392425b01b783e958f2a918caae7877dda1c98da48b664ef5ff09
SHA5123e86b4522e1f167b73c6477277bed52b7c418d675fbd13ae8916bece9b0dbe081a645ce58da11aba10d463f32af75582abe906a468f291cf38ce21ad2d36a6b3
-
Filesize
16KB
MD55e86145a6de363fa7c98304ad117428d
SHA1cfd94e3415de661add7d89ca88d8034f189f5e72
SHA25618a3dba419252417f7bea8e1d2a4d804aca8d00fba9f54dd598266c2f38c4f9b
SHA512291581a86f444c870eb7af253df1b399daee5e557ff031aa1dbb24271ddd89a415152571e88d30c2516c2e3719e5ccda49fdab12cb6d0645f6007e5977429a45
-
Filesize
8KB
MD5be8798ede5e6f3404662b7caf6da87b3
SHA1d0e6151ba9045a404dd0cadbe786cb5f407eb6f5
SHA2563fe8dca5f22729b65730a6aa1d830ab83fd5dc16aa2b16be5bde83c888498f69
SHA5121c2aeca88996424ec9aeafdb5dfab514c1aaafe65d46a10ada874162ce151336a756d25bd0c911695b8597050391222ede430ba73daadd02ff10d59b641d7794
-
Filesize
33KB
MD555912af3ecf0d5aabd7970ebe14d9e29
SHA150aaa7fb4a83005d1904c9f9b1a3ab6bcc776cca
SHA25680093e82c4238161fee18a71c02b64f2614541e75acf346c63512661f2e580e5
SHA51214d9f755f346fcedf5060686e00d10de336a1b570e28276d507fba12e31c84a231846ac1785e68fdafac27e0bb2aa64375ec8e1d4f6a64667ec07411482acf57
-
Filesize
238KB
MD5b50191bd3de4d4693cfb943be8fc060d
SHA1b4d4fe270a3ab471e70b5c6f03acdcb4e08bfbf2
SHA256122075ed80080a727e3f57137d23c888496908b1d93fda3f493e7284d11297b3
SHA51258a5167631017a6c8f89ef8d8fe417cc002eb395eae66fdc0ae59f5af7d8dc71be1b1b8ce9787fdbe05fb25a0be4809e34cdf9400aee42f712697069a85e7766
-
Filesize
30KB
MD5b7450db9faf966abec66eb2e724fee6e
SHA1a99e529aff12ad78f79e2ee0deab75644fc1eaf6
SHA256cb6e922d1a794e1566c6c02de51a95124bc2f613d9e4a8feb4dc2477e68fc1b7
SHA5125afe43f56d671d9568f2984d6016df75829e1f5635b67091e60c4b9dbcd0d9cb92e3cecf616d64baaea403373d8cfe81f474929e51d5495f9c9a20c857811211
-
Filesize
1KB
MD5d59c6ecab8570ac08ac48d0cb2872786
SHA1f1ae705f44d0dcf93fa79c3ac3d5683023b52645
SHA256298e61efbd3a402e5060b2225b7d62d5df0a106a049d593451b7091faa49b603
SHA51272d785fba2930b34cb4c65cbdc63bb59f9b0bd9ff03ecfd41b56bd292cdf219eff013a03f7141cd67ef5ad0292a57b23a2e1415e6191b9d0ba4b6f19d1bad24d
-
Filesize
10KB
MD5a2b1f6883faf70aca23c644ef203cad1
SHA1cbaced2f02273e439f55b0c681e77c4298c125e6
SHA256046db0343f3a55310f6167f23fcf7ad0fe599297f445774c60500fdcb0a90d13
SHA5125bd27c66f96286e3fd25892d89bab9e0dc611f40740f9fee5c99e22b76fe07cc68ebf8cb49a1b1a4ce861d0f4eeaa51062752d78869acafee10a784ef2fdfcd1
-
Filesize
35KB
MD5cdfaf507c150ca98243a97de221efd4a
SHA1be466669bf58beae04ea2a478b2393aa76d4ae27
SHA256c21b2c0ebcc3161fb43e4045896d0bbf67e0c5f59c9fa4de5674b91781dbdd29
SHA5129b9384499095aabdaad8ba1f060afb86460003ae9d378f0e25212c3b669c2700d6b35154d78f8f7c60be7b6adf4aebb34428d55612f02def795c79d1177e86b1
-
Filesize
128KB
MD59388215f7b0bea9fc164648b116ae818
SHA1e8155ef5953e685c787bbabd493b197610c735a9
SHA25659afefed207f4aabfd2fecb1e91cb32f2989c8b699ed11614bb371de566db1d6
SHA512157f16634ed8c38edd727698f62a9c9e7b49e6a64c91ee734e6cb5013f05376ad3f34c3cf3c223afaeac062fb01cca03604d8c4551647b755418e688e40b40e4
-
Filesize
184KB
MD52b3d6abea3284c442053b2791ee6a44a
SHA1fb8ff2deaaebc9f2aefb53ba436fc3b7a7b726e2
SHA2562563b791046e9d04c792d3414070c77014cb76ea4d4a5272b1e1859ea0e86656
SHA512725c28aced957a9158644612e6d92c8dc5cc6d1a1c684862e18363c08047e766162276544eea43b2480ce511c64f1c0fc48235149ca96a943a5f162f92bc7423
-
Filesize
117KB
MD5b74b7b859f0f4c7eaf03164bbd52e0b9
SHA1a3add60754b36f75e9f82add48f66ec9bc563202
SHA2561caeaae47de759b389920a56fa1f1fd592ea1e216d6ad660695b623f73d200bb
SHA512609a0cd858facce4ed5756e84f5e3ea7783ea004aed6b7b3290a1c16b92937b44dd0fde8189575e7a0d99baed29ca01663f72ee9fb85ca53cdc4ee2a74a7bb43
-
Filesize
104KB
MD501d588bbc82b326d47f33101b982639b
SHA1c83e68c0567fbbb1160d50eb5a5b9cb4044a51d0
SHA256150200cbba5348448f4b061b77b9051e41698f6fbc917e59e1b2b2cd15f2304a
SHA5127950adc337016388c223399ef7d66644155f0e10574ee67736c6f3e7aa828a16bad9ea759f355f2961b4b22f2d0ad56108bdf3eb2a2e4d5d2a85062db85d6961
-
Filesize
97KB
MD563743283e2e36d935198ad80a67a5ba6
SHA11bc783e0ac43af9705a8eb21690570edf5cffdf8
SHA25619849d9a3c885c366673bcb928056a47c9bf57cf5cc2b203fc136642790b2a41
SHA512e7df31dbfc6b48c23513a849a6b7e0c5941405d696c005e08621c2bb6d4e77b8febb4510d4a53e1d069cb2e494f0872104728ee28b3bcff69ea9f1d5bc7de910
-
Filesize
33KB
MD5474240cdeeb249f7fb40b0168f4f270e
SHA14d897dfd6da5536caa5e6a31db424faa6f587fe3
SHA2566d3fe48fc84aecba9214d99b693e0636929885a49c82e6f61195de1b1a023767
SHA512ea9e875eb576ead3b8088b39ab46530ea833a9474c90fb438e28f6de0d0ef3c857da9ab991beb3b9c951b95f734df5c3e8d6f6fbcfa60b07e87e7ce0c7e6c48e
-
Filesize
63KB
MD54b56e32265fe62fb66de88f69d5040a1
SHA1d2ad84c1b2b951a0fd86972c7664753b4784395c
SHA256a76bb74cedc0102c4449c48c26a085e2bd4ba68f5abee5c1abdc7eba7cadcafd
SHA512da23f9348bb75ca7e5e8b4d3851def8f4253e71b4312eda1fe5351859480ff153dda690b4e66225711fbe4a815bcc1d41347d9b867ff292d9952032dd6a483ff
-
Filesize
862KB
MD501f43663e9f90ba379a1b2a0afc379a5
SHA11cdd446c0f06686a0a70a74093902f14896a1894
SHA256ba7aaff3e1a0368a7fe754c40a1944e33d2b4d727f343e3a0caec80e78c94f48
SHA512d62d7c8f15234c7c86eddced663c5d9e6b932d54f069a062f599b8790a81861487c37d78b868b86d1340049a482ccea6015ed47ee0ea164de161f55f793f22dc
-
Filesize
55KB
MD51fd3f08e1a22898d9147d451762457b6
SHA19c559cbf3db6eb0c43a5fcc0accb5ec8f662d889
SHA2561d568dd4f32035ee499b0d9ea5efaded818892059c4047adf04f6a9d7e8e78e9
SHA5122a8b19b69da7f01e8475b07113eba68eef8af8fef8d35caca02b105d42f6e6ead66482d1f28a84d67cdd63218e511b518cab447a11e692aedc1b7900923e1adf
-
Filesize
469KB
MD556dc4122716ff24e7beb1f871477e699
SHA153d2d920a75ac8f36cdf5fa1552b60baa0d366de
SHA25624f6893c513a084811452dd380895cc76081eebd40e269f233172a3e27ef043a
SHA5121e46039a8f2378a35d2e7dcf2929c8424d5417c9f4bfb5fd78d3853aef32048cc56fbd5411b4517d1ef7db5424b943e111e19b007d300794a350bcd9bb8d3975
-
Filesize
1.8MB
MD5fba36b620fe82a4a25a8fd6d2b37e206
SHA1187c35319ba684426cbf4ab028b7860d051d0424
SHA256c334e02bd7a259a15d09d1fb9d3da5d90047d6785655e1728bbcf3600e9842de
SHA5122814e7c3734a01f9d077c423c566145064871a6b2811f925a0eb47090b7d100c2aa00043abc960a89006d0b25029a09e61a3a77ee76dfa1f7343c91ebb31df25
-
Filesize
157KB
MD539631fc69b270c8cd787bc81632ad0e0
SHA1e5885286c3cacdaf6d217b65f39c9c6409118f74
SHA25605ecc3a61868b14497f0c2a23290cace3e60bbb6f281d4baa28e4861216dd844
SHA512404dc377b3f954fe3f17040b874a743b602e254e33c2c8c7fab8444791d194ff2d1e3205e02cee9331db9368392ebbfad11580f0e43f2c272253936c688d41b6
-
Filesize
8KB
MD5efe96e08e4b8b5664648cb0c01d4249d
SHA1d897340b727433f7d7d04e91afc0ae9adbb7e9ee
SHA25628bfcfd50af5d822f6dc1b42790695dafeef0f0d9511a4d62934ffa0681fe941
SHA512007f22ea691890628165f1cf1905942defcfb86ec3a0e145b902f563ec8680823a8af8b5f1df54be229891a76588a5726b0ee2d30e5d7edf553c6a0dc51b4ad9
-
Filesize
343KB
MD5d017532abdfe0a1a0d3db34d496b4b5b
SHA1b2ec9e5c748a3f34e7185ff88f6697b6f40435f5
SHA256b62439af70d43c1155042f907f54b1125a6a8d75cb4af185acdf9e8b8dc3f9ff
SHA51260d4c52484c1ba34c59525e3418c38e2392651be04cb2552a072ad6db1f52555aac3db767a6a823841f528fc28d3969a0c07bbfb783c93d93b47c74b5c77339e
-
Filesize
51KB
MD568bcd7c3e9cfd782c83023ff5711b3c3
SHA12cf4792bf583909178492f3661e8f7c7af7c2b90
SHA256b219ef4d28995f8f01961f89c6f902fc27ad8ea304995de2ffb7db6156f7e76a
SHA5127ac2192f341e9e4b89cb3a88e0c406bc138252d3c0e2fa0b7621fca26fe564fe53c7199ed2917e81e8d01af321b4c4f4a9bbec04ac218e55c6839d770600d1b6
-
Filesize
33KB
MD501bc9fdfbbbea7e0be665b00b337f621
SHA13eb076944e1d11d10cde4f809cb82a44991d1d11
SHA256bcbd63c2a80cfdeb2aac4468bcf294a201db1d2c91d41f20ea505248607d429f
SHA512a61a5cb729c7e1e50f4207151fc51d355243d6be674beb547f78e8af56064031d96fc46ac04ea6141e4a548a0bc69f503aac1982d8a263ec25c45ad468233458
-
Filesize
196KB
MD56542be957cbf8aae0e634aa958a5b8a1
SHA1406320761c051f6171da1680317e1af6308ac3a2
SHA2563f9a8b41a5af27931c286514e5bd4252fed9997fa75f92027fcbb2edacd8141a
SHA5122a08189206bf76db9de2f21af193a3c18b0bccd350dc2fec16fec0428bd5307ce3b26aed3fe79258647d79657aa3eb75bd1e35e0085f300791e41002a2934c4f
-
Filesize
164KB
-
Filesize
1.3MB
-
Filesize
5.8MB
-
Filesize
880KB
-
Filesize
932KB
-
Filesize
196KB
-
Filesize
128KB
-
Filesize
1.6MB
-
Filesize
788KB
-
Filesize
1.2MB
-
Filesize
2.5MB
-
Filesize
816KB
-
Filesize
2.7MB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
36KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
1.0MB
-
Filesize
1.3MB
-
Filesize
2.5MB
-
Filesize
40KB
-
Filesize
1.6MB
-
Filesize
156KB
-
Filesize
48KB
-
Filesize
152KB
-
Filesize
56KB
-
Filesize
5.8MB
-
Filesize
128KB
-
Filesize
912KB
-
Filesize
2.7MB
-
Filesize
880KB
-
Filesize
192KB
-
Filesize
932KB
-
Filesize
2.7MB
-
Filesize
196KB
-
Filesize
1.2MB
-
Filesize
2.7MB
-
Filesize
2.7MB
-
Filesize
2.5MB
-
Filesize
1.6MB
-
Filesize
5.8MB
-
Filesize
932KB
-
Filesize
788KB
-
Filesize
1.2MB
-
Filesize
816KB
-
Filesize
156KB
-
Filesize
192KB
-
Filesize
196KB
-
Filesize
196KB
-
Filesize
196KB
-
Filesize
196KB
