Overview

overview

7

Static

static

7

34012ddec4...46.exe

windows7-x64

7

34012ddec4...46.exe

windows10-2004-x64

7

$PLUGINSDI...ay.dll

windows7-x64

3

$PLUGINSDI...ay.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows7-x64

1

$PLUGINSDI...sh.dll

windows10-2004-x64

1

$PLUGINSDI...on.dll

windows7-x64

7

$PLUGINSDI...on.dll

windows10-2004-x64

7

Analysis

  • max time kernel
    51s
  • max time network
    53s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/06/2024, 21:30

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    34012ddec4e5c76a75c2ad5db12983f72173b8551c8b4b5765a0140645504b46.exe
  • Size 99KB
  • Sample240613-1cm72a1aph
  • SHA256 34012ddec4e5c76a75c2ad5db12983f72173b8551c8b4b5765a0140645504b46
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • Loads dropped DLL 16 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\34012ddec4e5c76a75c2ad5db12983f72173b8551c8b4b5765a0140645504b46.exe
    "C:\Users\Admin\AppData\Local\Temp\34012ddec4e5c76a75c2ad5db12983f72173b8551c8b4b5765a0140645504b46.exe"
    1⤵
    • Loads dropped DLL
    PID:2624

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        NSISArray.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsc592D.tmp\NSISArray.dll
        • Size 19KB
        • SHA256 6a129a9eefae85a9412e889e0c74fdaa21d20254fa13cacef5429885775017dc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        NSISdl.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsc592D.tmp\NSISdl.dll
        • Size 14KB
        • SHA256 dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        System.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsc592D.tmp\System.dll
        • Size 11KB
        • SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        newadvsplash.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsc592D.tmp\newadvsplash.dll
        • Size 8KB
        • SHA256 53377d0710f551182edbab4150935425948535d11b92bf08a1c2dcf989723bd7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        splash.gif
        • Path C:\Users\Admin\AppData\Local\Temp\nsc592D.tmp\splash.gif
        • Size 11KB
        • SHA256 c1aac2ad5fbfb9ae5af701d502d267797aeb253e9069580c1c7a4321a15a0350
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        version.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsc592D.tmp\version.dll
        • Size 6KB
        • SHA256 3eba921ef649b71f98d9378dee8105b38d2464c9ccde37a694e4a0cd77d22a75
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        memory/2624-62-0x0000000002820000-0x000000000282C000-memory.dmp
        Download

        memory/2624-61-0x0000000002820000-0x000000000282C000-memory.dmp
        Download