Analysis
-
max time kernel
148s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
22-11-2024 03:43
General
-
Target
file_ (1).exe
-
Size
288KB
-
MD5
6ffa35b0a2acd5565ade6d3e1af64a94
-
SHA1
7cd6bd698f1629a5ef913012c4b0ddad41f9a332
-
SHA256
66c7984e9f8af6d058d696c4f38efe2d527d02bfba83a3ec2db204ce9c70aa29
-
SHA512
916d4591806e95a5967c0dc495988b30202f14395efc85586e7c1294c22352a93a8ed8d3df7ebcf44809830a44f211f365196adced4da863479024a86a762f72
-
SSDEEP
6144:eSMxSiMnm1e22/p56dNI07bMLox7xRoVkUSlS6mldw40jELBAF:eSwys32/ydNI07bmcxAkHSTZdAF
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
-
Loads dropped DLL 1 IoCs
-
UPX packed file 5 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\file_ (1).exe"C:\Users\Admin\AppData\Local\Temp\file_ (1).exe"1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
59KB
MD5532fc8d01c1284cda4ec482b22b65df6
SHA1b755c0d03f2ba4b4d0670a2ab25b683d911c494d
SHA256691421541cc0b43101b0af50848b8228bf28bfc2a6f39ee5e33125a214e12ff1
SHA512483710a76b65581082e9fbe89befa2eef967cfe307089709653de0c4ddfbaf5773fd41496c6d6f58994a255c48ff6bb64e1ea2a0effb45c14160fe920da505dc
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB
-
Filesize
332KB