Overview
overview
7Static
static
3OhSoft OCa...m].rar
windows7-x64
3OhSoft OCa...m].rar
windows10-1703-x64
3OhSoft OCa...m].rar
windows10-2004-x64
7OhSoft OCa...m].rar
windows11-21h2-x64
3OhSoft OCa...ED.rar
windows7-x64
3OhSoft OCa...ED.rar
windows10-1703-x64
3OhSoft OCa...ED.rar
windows10-2004-x64
7OhSoft OCa...ED.rar
windows11-21h2-x64
3AMPED/Patch.exe
windows7-x64
7AMPED/Patch.exe
windows10-1703-x64
7AMPED/Patch.exe
windows10-2004-x64
7AMPED/Patch.exe
windows11-21h2-x64
7amped.nfo
windows7-x64
1amped.nfo
windows10-1703-x64
1amped.nfo
windows10-2004-x64
1amped.nfo
windows11-21h2-x64
1file_id.diz
windows7-x64
3file_id.diz
windows10-1703-x64
3file_id.diz
windows10-2004-x64
3file_id.diz
windows11-21h2-x64
3OhSoft OCa....0.exe
windows7-x64
4OhSoft OCa....0.exe
windows10-1703-x64
4OhSoft OCa....0.exe
windows10-2004-x64
4OhSoft OCa....0.exe
windows11-21h2-x64
4Analysis
-
max time kernel
1194s -
max time network
1202s -
platform
windows10-1703_x64 -
resource
win10-20231215-en -
resource tags
arch:x64arch:x86image:win10-20231215-enlocale:en-usos:windows10-1703-x64system -
submitted
14/01/2024, 16:25
Static task
static1
Behavioral task
behavioral1
Sample
OhSoft OCam 520.0 Multilingual [PeskTop.com].rar
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
OhSoft OCam 520.0 Multilingual [PeskTop.com].rar
Resource
win10-20231215-en
Behavioral task
behavioral3
Sample
OhSoft OCam 520.0 Multilingual [PeskTop.com].rar
Resource
win10v2004-20231215-en
Behavioral task
behavioral4
Sample
OhSoft OCam 520.0 Multilingual [PeskTop.com].rar
Resource
win11-20231222-en
Behavioral task
behavioral5
Sample
OhSoft OCam 520.0 Multilingual [PeskTop.com]/AMPED.rar
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
OhSoft OCam 520.0 Multilingual [PeskTop.com]/AMPED.rar
Resource
win10-20231215-en
Behavioral task
behavioral7
Sample
OhSoft OCam 520.0 Multilingual [PeskTop.com]/AMPED.rar
Resource
win10v2004-20231215-en
Behavioral task
behavioral8
Sample
OhSoft OCam 520.0 Multilingual [PeskTop.com]/AMPED.rar
Resource
win11-20231215-en
Behavioral task
behavioral9
Sample
AMPED/Patch.exe
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
AMPED/Patch.exe
Resource
win10-20231215-en
Behavioral task
behavioral11
Sample
AMPED/Patch.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral12
Sample
AMPED/Patch.exe
Resource
win11-20231215-en
Behavioral task
behavioral13
Sample
amped.nfo
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
amped.nfo
Resource
win10-20231215-en
Behavioral task
behavioral15
Sample
amped.nfo
Resource
win10v2004-20231215-en
Behavioral task
behavioral16
Sample
amped.nfo
Resource
win11-20231215-en
Behavioral task
behavioral17
Sample
file_id.diz
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
file_id.diz
Resource
win10-20231220-en
Behavioral task
behavioral19
Sample
file_id.diz
Resource
win10v2004-20231215-en
Behavioral task
behavioral20
Sample
file_id.diz
Resource
win11-20231215-en
Behavioral task
behavioral21
Sample
OhSoft OCam 520.0 Multilingual [PeskTop.com]/oCam_v520.0.exe
Resource
win7-20231129-en
Behavioral task
behavioral22
Sample
OhSoft OCam 520.0 Multilingual [PeskTop.com]/oCam_v520.0.exe
Resource
win10-20231215-en
Behavioral task
behavioral23
Sample
OhSoft OCam 520.0 Multilingual [PeskTop.com]/oCam_v520.0.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral24
Sample
OhSoft OCam 520.0 Multilingual [PeskTop.com]/oCam_v520.0.exe
Resource
win11-20231215-en
General
-
Target
AMPED/Patch.exe
-
Size
61KB
-
MD5
b92968370e9c611e64b339ec9fc09fa8
-
SHA1
4e0599109a3f86de69739e74aa0bfee304ca4fc8
-
SHA256
b85a445a6f11ef7427ee0f7cb9f7fd84a6e67ea663d7f3b70358d45050e3ef18
-
SHA512
860eb58929984b791c91996eeecbfc14aed6f8c49e1094d445ffed1fa66eb2acac9ad8e4ba6281c0f57f6df87f3d691bb426be8bc9812267017faa827c8c42cf
-
SSDEEP
1536:4wZikPUO9iXtxAfHlqCp5pFlwuXgkgBxgbNG:4wd8wHcCnKuXgnBxgZ
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 216 Patch.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
55KB
MD54d3b330ce2da476b7287be269d6d3ee3
SHA1c8e8ce8c215b60c692c068be56969bc10a9e3d0c
SHA256ffa4e072a0b58dbbb87a661b21cd6058f50c3b4a0040ecceb1a53441430b6683
SHA5128e8b9b2977149e3df692f9fd8e76ec9b7767fafcd0c55fdabc34448735fe442250722e70be16598e43243cfbf4ce4c427d6326b326939b15f21991d4aa7df072