Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
23/05/2024, 20:26
General
-
Target
38543cce5d3e30fc21b9c75ccacf29c3829210d774457acdb632e1668aa98f0c.exe
-
Size
2.1MB
-
MD5
de703032f32604c3f2348ef0ed13b040
-
SHA1
1e6c7b6ca388281df0350e79d2bd8db2c24c02a0
-
SHA256
38543cce5d3e30fc21b9c75ccacf29c3829210d774457acdb632e1668aa98f0c
-
SHA512
01ea7be123716f89d1c86fcc7780698597239d13a9a0fbdbf693f9eb94ed9753fa736560a139f1b54bce518fb57bd56fd9f2e594b59505c91cad34875be257d5
-
SSDEEP
49152:a0Kok/d3OtFsi0OtRa6cigO5F/JL0J4/0gM16W4wF1BrogE0LrmX/SxS0jCc2B5B:Pad+tafOtsdg/OJ4cp16W4wF1NogEnXT
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
-
Loads dropped DLL 2 IoCs
-
UPX packed file 33 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in Windows directory 3 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\38543cce5d3e30fc21b9c75ccacf29c3829210d774457acdb632e1668aa98f0c.exe"C:\Users\Admin\AppData\Local\Temp\38543cce5d3e30fc21b9c75ccacf29c3829210d774457acdb632e1668aa98f0c.exe"1⤵
- Loads dropped DLL
- Writes to the Master Boot Record (MBR)
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
39B
MD596c3f471248f2206a4d27fe81b40b142
SHA111130da4b0669d0fb0cf389e43fa1d1b5f6d5b08
SHA25670f0ab62a18c2a91cabe2fdf75aa5cd5b0230063633ba4c28098709b73634523
SHA512324c058c36b31a6b69d8dfde454f77f491910d3b8cf4e571c76915fe5b87b8f8d78572d1f4dad10d82297192f892ba5ec0e7d2cc12919b702dbaf52d826165cd
-
Filesize
1.3MB
MD586ca77f2d6722a81c14e5983e1f238bf
SHA131b9bf5a106954c4cf7061b5c235dbd9987a2df8
SHA256f9732044c3ddbede118b726fc8f1bb271bab9242d8704e45bc54c366c11259e3
SHA5126449169db5ba04550f01e9d2c807ebd316ff6a56afa54bf0a1901c9d66ca8d9101c2b9196f7455872e9cd7cba3979423edb28ab84499c13bbeca134b18f1414a
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
3.4MB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
3.4MB
-
Filesize
252KB
-
Filesize
4.7MB
-
Filesize
4KB
-
Filesize
4.7MB
-
Filesize
3.4MB
-
Filesize
4.7MB
-
Filesize
4.7MB
-
Filesize
4KB