Overview

overview

7

Static

static

Patch.exe

windows7-x64

7

Patch.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    193s
  • max time network
    229s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-11-2022 08:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Patch.exe

  • Size

    552KB

  • MD5

    baeeefdad5eb41ae4a14aca756ae8afb

  • SHA1

    934ecccbd09cb972dfff2756bc05d95bed5799e4

  • SHA256

    fefa92fae760c0873d43a17e64fbb4a717c70ad4e87d6656efec5e2497b25044

  • SHA512

    76f32671bf86850bdcc106af21a75afc79f6ea8d0ccf19ab927ee76ce23cb3a3c5e028e1c25fa02b81696f2daebfb4776246c4dc2c932d7a87a0468d5a2c7d85

  • SSDEEP

    12288:8vYE9LjQ8NM4IiOdG0zBi6BT5NGhDAxldcChAgH5papcm:8vYYLjAdG8iKfxxXOem

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious use of SetWindowsHookEx 11 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Patch.exe
    "C:\Users\Admin\AppData\Local\Temp\Patch.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:4020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\E_4\krnln.fnr
    Filesize

    1.0MB

    MD5

    199e87ea6b03e907316560a58f7b51af

    SHA1

    8515b7d54e11ba32c52240044164b60b2f112341

    SHA256

    0a0aee69b025f1206af1193b13e0476b49506b7d77ef2ed824ca169cfa749970

    SHA512

    1221b91cad64a7739d2aa676924b87f68aceb66faa0edadd2f7e4fdf51054cae56bd2b846ebf69602fbe180ff0efe0218eb1a342d08ba175105d7b5fd4e4b277

    Download Submit
  • memory/4020-133-0x0000000000400000-0x000000000040F000-memory.dmp
    Filesize

    60KB

    Download
  • memory/4020-134-0x0000000000400000-0x000000000040F000-memory.dmp
    Filesize

    60KB

    Download