Analysis
-
max time kernel
3s -
platform
windows11-21h2_x64 -
resource
win11-20240508-en -
resource tags
-
submitted
02-06-2024 18:29
General
-
Target
avi blocker.exe
-
Size
1.2MB
-
MD5
a366435c7b85c3416e6508eed07a9d7a
-
SHA1
e236c3dc9daded99529524b9a8cf31cd8c9b6e10
-
SHA256
518664818c0df357b99e7ffced815ff405c075801bf9af0ce10fb6489d124ad7
-
SHA512
ab614d0b26ed289bf86d322364b14d86184376067df837c71f2eebbcc145b827de0aa040a975d3d4c8c15bfb528d88ae4a00355b2a1955c477e9f5a7894144e7
-
SSDEEP
24576:UJkqjVnlqud+/2P+AmLI0U6/f8xecRuL+VFSUwMFpMWvFLUpHeQm2Hm:UJkqXfd+/9A2I0EjRui4WmptHm
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
-
Loads dropped DLL 1 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\avi blocker.exe"C:\Users\Admin\AppData\Local\Temp\avi blocker.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
525KB
MD52b3ffcfa5066158629e12ba9fa18e625
SHA11822ab821cc729fc212e93dca7a5f7904d84ca04
SHA256ac0cd6e586b18aa15323e70fb7ee7cf1c3c0c5a3b8313443e2ee5e4c5362f1c2
SHA512843d8e02f9c1bc57cd43da521c3fe4b0cf2606db5c01ce75171ea3bdaf4cbe8087cab3f4ab852801e62dc94981b5e95999b3dd4b30e8031429d148597c5c988a
-
Filesize
4KB
-
Filesize
1.2MB
-
Filesize
800KB
-
Filesize
88KB
-
Filesize
7.7MB
-
Filesize
800KB
-
Filesize
7.7MB