Analysis

  • max time kernel
    1194s
  • max time network
    1202s
  • platform
    windows10-1703_x64
  • resource
    win10-20231215-en
  • resource tags

    arch:x64arch:x86image:win10-20231215-enlocale:en-usos:windows10-1703-x64system
  • submitted
    14/01/2024, 16:25

General

  • Target

    AMPED/Patch.exe

  • Size

    61KB

  • MD5

    b92968370e9c611e64b339ec9fc09fa8

  • SHA1

    4e0599109a3f86de69739e74aa0bfee304ca4fc8

  • SHA256

    b85a445a6f11ef7427ee0f7cb9f7fd84a6e67ea663d7f3b70358d45050e3ef18

  • SHA512

    860eb58929984b791c91996eeecbfc14aed6f8c49e1094d445ffed1fa66eb2acac9ad8e4ba6281c0f57f6df87f3d691bb426be8bc9812267017faa827c8c42cf

  • SSDEEP

    1536:4wZikPUO9iXtxAfHlqCp5pFlwuXgkgBxgbNG:4wd8wHcCnKuXgnBxgZ

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\AMPED\Patch.exe
    "C:\Users\Admin\AppData\Local\Temp\AMPED\Patch.exe"
    1⤵
    • Loads dropped DLL
    PID:216

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\dup2patcher.dll

          Filesize

          55KB

          MD5

          4d3b330ce2da476b7287be269d6d3ee3

          SHA1

          c8e8ce8c215b60c692c068be56969bc10a9e3d0c

          SHA256

          ffa4e072a0b58dbbb87a661b21cd6058f50c3b4a0040ecceb1a53441430b6683

          SHA512

          8e8b9b2977149e3df692f9fd8e76ec9b7767fafcd0c55fdabc34448735fe442250722e70be16598e43243cfbf4ce4c427d6326b326939b15f21991d4aa7df072

        • memory/216-2-0x0000000075B20000-0x0000000075B46000-memory.dmp

          Filesize

          152KB

        • memory/216-5-0x0000000075B20000-0x0000000075B46000-memory.dmp

          Filesize

          152KB