Analysis
-
max time kernel
43s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
24-11-2022 08:12
Static task
static1
Behavioral task
behavioral1
Sample
Patch.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Patch.exe
Resource
win10v2004-20221111-en
General
-
Target
Patch.exe
-
Size
552KB
-
MD5
baeeefdad5eb41ae4a14aca756ae8afb
-
SHA1
934ecccbd09cb972dfff2756bc05d95bed5799e4
-
SHA256
fefa92fae760c0873d43a17e64fbb4a717c70ad4e87d6656efec5e2497b25044
-
SHA512
76f32671bf86850bdcc106af21a75afc79f6ea8d0ccf19ab927ee76ce23cb3a3c5e028e1c25fa02b81696f2daebfb4776246c4dc2c932d7a87a0468d5a2c7d85
-
SSDEEP
12288:8vYE9LjQ8NM4IiOdG0zBi6BT5NGhDAxldcChAgH5papcm:8vYYLjAdG8iKfxxXOem
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
Processes:
Patch.exepid process 896 Patch.exe -
Suspicious use of SetWindowsHookEx 11 IoCs
Processes:
Patch.exepid process 896 Patch.exe 896 Patch.exe 896 Patch.exe 896 Patch.exe 896 Patch.exe 896 Patch.exe 896 Patch.exe 896 Patch.exe 896 Patch.exe 896 Patch.exe 896 Patch.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
\Users\Admin\AppData\Local\Temp\E_4\krnln.fnrFilesize
1.0MB
MD5199e87ea6b03e907316560a58f7b51af
SHA18515b7d54e11ba32c52240044164b60b2f112341
SHA2560a0aee69b025f1206af1193b13e0476b49506b7d77ef2ed824ca169cfa749970
SHA5121221b91cad64a7739d2aa676924b87f68aceb66faa0edadd2f7e4fdf51054cae56bd2b846ebf69602fbe180ff0efe0218eb1a342d08ba175105d7b5fd4e4b277
-
memory/896-54-0x0000000075E31000-0x0000000075E33000-memory.dmpFilesize
8KB
-
memory/896-56-0x0000000000400000-0x000000000040F000-memory.dmpFilesize
60KB
-
memory/896-57-0x0000000000020000-0x000000000002F000-memory.dmpFilesize
60KB