Analysis

  • max time kernel
    142s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2023, 10:42

General

  • Target

    StartAllBack_3.x_Patch.exe

  • Size

    63KB

  • MD5

    07ca9ef8ca62bdfdcb8bd9b966d60bf2

  • SHA1

    54bbb2bfd527ec503e66fe0db1c99a568c0240e8

  • SHA256

    124a96831880a7f4ec1c70705466b9a48723ca387f7abc12f0d28d28a18edf20

  • SHA512

    d0f0b0d5c01c0dcbc8458e509348f7e7969b87bd6261242e3488d9fef61f7e335f1fdcc9eb4bc777045202b6ebb5fa231fc39575f3da81163f82290e20b47e85

  • SSDEEP

    1536:Vg6JzfNCUod2REhHMHwvG9wF2DxzYjVxT:DfIUocEqH9NzYhx

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\StartAllBack_3.x_Patch.exe
    "C:\Users\Admin\AppData\Local\Temp\StartAllBack_3.x_Patch.exe"
    1⤵
    • Loads dropped DLL
    PID:4612

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\dup2patcher.dll

          Filesize

          57KB

          MD5

          2fcac0a53e9aaffa146e751f8a1e1ae4

          SHA1

          cc074e73c8b50cf1973185188ed2c1ca630f01a3

          SHA256

          62dca27bfcf3cfab9fe834ca78278be7a53d8c1b485c0fa5051a86703fe79059

          SHA512

          b2cf9577ab0c9d002d52de15dceb9e52e11686649e9ff5d6a9fdc565eb7ee2aa2ae735cf0c8712c1dde895792542d3d0426624cc62b11f885357646e7e5f3ac6

        • memory/4612-2-0x0000000074C80000-0x0000000074CA7000-memory.dmp

          Filesize

          156KB

        • memory/4612-5-0x0000000074C80000-0x0000000074CA7000-memory.dmp

          Filesize

          156KB