Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
12-07-2024 06:49
General
-
Target
keygen.exe
-
Size
48KB
-
MD5
d3be4ac211276300742f856cd4547777
-
SHA1
4bfc58f268151009fde73156d95d0cfc37c1a4e4
-
SHA256
f551fab1e40be1354ab11655225ab89b656e7d9e5858aa747d708384684b5376
-
SHA512
c6365a43bded1bb217fe01156a05a3c3759d6d62043572260c903f5ff7bbb48a1fb966abb354f4e21b6af8f3aa76049e77e9a762b4a973de9337fae0e56ece05
-
SSDEEP
768:27kMDRtNQabdyYdMEfwmf4/4YDEFKymegI+6aWBvAoSf15kyx2CGTh9euIOwN:2HD/Cabr+EfZCNyMjZaAirt/Q
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
-
Loads dropped DLL 1 IoCs
-
UPX packed file 17 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\keygen.exe"C:\Users\Admin\AppData\Local\Temp\keygen.exe"1⤵
- Loads dropped DLL
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x38c 0x1541⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10KB
MD5e77293f6da4ff1a2605dbd311f3b395f
SHA1c0d2f4add89b7c18c17ea2f2c14f31776ac4be2f
SHA2560fe373ee439003d0fb80ae3ea5bbcf4aa8cacf2e9b208365349a80e81ea76064
SHA512bb31be0d3ee0d6fb324c60d69f9fe50b4c42cb1916361b5e2649406a06ac7a9ad654f9f2fe1ab7607b03dbe68ed32dda80f9f5358ef3a0ff92ef625d60b753ae
-
Filesize
68KB
-
Filesize
140KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
140KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB