Analysis
-
max time kernel
29s -
max time network
31s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-es -
resource tags
-
submitted
04-03-2023 10:43
General
-
Target
Patch.exe
-
Size
692KB
-
MD5
493af8c51c6dc50cdf81eccbbde635f9
-
SHA1
9ea32655417927aae5114b52b04f4b941c79eee1
-
SHA256
5272b8d1f86be134bfed13454fdca4860c56a2e07efc640a53c47834ffd73862
-
SHA512
46e0fce5d350b7dac9982c99da985ac5bac221c83b30a3a100dcacb3c68e8fb1e93eaa2ab2b63ccb9756b1ddda981ffee5904a40532ef31debca2fb429954705
-
SSDEEP
12288:B99js/mSVpA1kRLhuGlrB97Fw6NBBLI7TvMMfsfwU:Jje7VpA1kyyxjB9I7TNsfwU
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Patch.exe"C:\Users\Admin\AppData\Local\Temp\Patch.exe"1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
1.8MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
1.8MB
-
Filesize
1.8MB