Overview

overview

7

Static

static

7

Patch-Mast....x.exe

windows7-x64

7

Patch-Mast....x.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Patch-Master PDF Editor 5.6.x.x.exe

  • Size

    495KB

  • Sample

    220929-fjqaraahcq

  • MD5

    5d8bb2f9f03c88f149f93c34c7e90ea4

  • SHA1

    89cea38122ce3623ddb3c53835cffd37d3074d3e

  • SHA256

    109ee2dffb22e1d66bdc8523d4839ad0509749dbf714a6681e096887d5d8bc19

  • SHA512

    a0d78dd1ebd9a08b8dfecf42d2caaca2f052c512e058530bc9c7b7c2810f2f09be8870099107bdcd8981c57ffa3b7e89ec7b0c8ff7f91d079c26fce349433f50

  • SSDEEP

    6144:f3IFhhBMzRC0U7PfJqOvi1pbmH6yX9Weaefet3Agp0q9ygbX+1RzDU8lI4QDrbB2:vI8ATxscH6yX9Z9saMJcR/V7

Score
7/10
agilenet

Malware Config

Targets

    • Target

      Patch-Master PDF Editor 5.6.x.x.exe

    • Size

      495KB

    • MD5

      5d8bb2f9f03c88f149f93c34c7e90ea4

    • SHA1

      89cea38122ce3623ddb3c53835cffd37d3074d3e

    • SHA256

      109ee2dffb22e1d66bdc8523d4839ad0509749dbf714a6681e096887d5d8bc19

    • SHA512

      a0d78dd1ebd9a08b8dfecf42d2caaca2f052c512e058530bc9c7b7c2810f2f09be8870099107bdcd8981c57ffa3b7e89ec7b0c8ff7f91d079c26fce349433f50

    • SSDEEP

      6144:f3IFhhBMzRC0U7PfJqOvi1pbmH6yX9Weaefet3Agp0q9ygbX+1RzDU8lI4QDrbB2:vI8ATxscH6yX9Z9saMJcR/V7

    Score
    7/10
    agilenet

    • Loads dropped DLL

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

      agilenet
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks