21c3dda1705a30f4d677e8bfbda332ca184e75fa377bf83e64e579209f360962 | Triage

Analysis

max time kernel
149s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
22-05-2024 20:42

Sharing

Report Analysis Logs

General

Target

AcrylicUI.exe
Size

572KB
MD5

9f82dc46fad4bf327e63fe92cbb9702c
SHA1

cbe517a40db31b48a988d7791454a53b19e41436
SHA256

68183b903249c26d90d214fa1b60d53f5d100af8f87da5847769230bca189693
SHA512

f704757c32b5608c679b5948c9ba5176442c353ab217ffac67c9004cff6f220367096fabca75b04ed5948572cb94dffa23d12d2acff459d6f0177502e8d2b7fe
SSDEEP

12288:N+yaodvZrLi3YH0ASp1gzb2T/aheTLEw5OFHnGtKX2:N+5orBwp2b0yhe/h5ZtKX

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes:

AcrylicUI.exe

pid	process
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe
860	AcrylicUI.exe

C:\Users\Admin\AppData\Local\Temp\AcrylicUI.exe
"C:\Users\Admin\AppData\Local\Temp\AcrylicUI.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:860

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/860-0-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download
memory/860-1-0x0000000000400000-0x0000000000495000-memory.dmp

Filesize
596KB

Download
memory/860-3-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download