Overview
overview
8Static
static
3EaseUS Dat...R].zip
windows7-x64
1EaseUS Dat...R].zip
windows10-2004-x64
1EaseUS Dat...ir.zip
windows7-x64
1EaseUS Dat...ir.zip
windows10-2004-x64
11- Hosts b...er.bat
windows7-x64
81- Hosts b...er.bat
windows10-2004-x64
82- Patcher....1.exe
windows7-x64
72- Patcher....1.exe
windows10-2004-x64
72- Patcher....1.exe
windows7-x64
72- Patcher....1.exe
windows10-2004-x64
73- KeyGen ...e!.exe
windows7-x64
13- KeyGen ...e!.exe
windows10-2004-x64
1ReadMe (EDRW).txt
windows7-x64
1ReadMe (EDRW).txt
windows10-2004-x64
1EaseUS Dat...up.exe
windows7-x64
4EaseUS Dat...up.exe
windows10-2004-x64
4Resubmissions
15/06/2026, 01:28
260615-bv4kasgv4x10/06/2026, 07:32
260610-jdfe5sgv8m21/04/2026, 03:57
260421-ejapmabt6s26/02/2026, 11:07
260226-m7zbwsb16d20/10/2025, 19:02
251020-xp6ncsdk3z23/02/2024, 14:33
240223-rw7aksbb358Analysis
- max time kernel
118s - max time network
118s - platform
windows7_x64 - resource
win7-20240221-en - resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system - submitted
23/02/2024, 14:33
Static task
static1
Behavioral task
behavioral1
Sample
EaseUS Data Recovery Wizard Technician 17.0.0.0 Build 20231121 Multilingual [FileCR].zip
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
EaseUS Data Recovery Wizard Technician 17.0.0.0 Build 20231121 Multilingual [FileCR].zip
Resource
win10v2004-20240221-en
Behavioral task
behavioral3
Sample
EaseUS Data Recovery Wizard Technician 17.0.0.0 Build 20231121 Multilingual/EDRW Patch v1.1 & Activator 2.1 - yaschir.zip
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
EaseUS Data Recovery Wizard Technician 17.0.0.0 Build 20231121 Multilingual/EDRW Patch v1.1 & Activator 2.1 - yaschir.zip
Resource
win10v2004-20240221-en
Behavioral task
behavioral5
Sample
1- Hosts blocker/EaseUS hosts blocker.bat
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
1- Hosts blocker/EaseUS hosts blocker.bat
Resource
win10v2004-20240221-en
Behavioral task
behavioral7
Sample
2- Patcher/(32-Bit) EDRW Patcher v1.1.exe
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
2- Patcher/(32-Bit) EDRW Patcher v1.1.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral9
Sample
2- Patcher/(64-Bit) EDRW Patcher v1.1.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
2- Patcher/(64-Bit) EDRW Patcher v1.1.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral11
Sample
3- KeyGen (Activator)/EDRW v13 Activator v2.1 - De!.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
3- KeyGen (Activator)/EDRW v13 Activator v2.1 - De!.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral13
Sample
ReadMe (EDRW).txt
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
ReadMe (EDRW).txt
Resource
win10v2004-20240221-en
Behavioral task
behavioral15
Sample
EaseUS Data Recovery Wizard Technician 17.0.0.0 Build 20231121 Multilingual/setup.exe
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
EaseUS Data Recovery Wizard Technician 17.0.0.0 Build 20231121 Multilingual/setup.exe
Resource
win10v2004-20240221-en
General
- Target 2- Patcher/(64-Bit) EDRW Patcher v1.1.exe
- Size 147KB
- Sample240223-rw7aksbb35
- SHA256 04491956a8b8993e031d632304ff57667bc4c77885da153e75454ff2e25dbc1d
- MD5 087406e501b283f538d66c98b7ea1991
- SHA1 9a8d7d7c82b87ee6875c8f0397f3f61d3508e908
- SHA512 d938192532c84a6c037fc844f2e5bad0cadd10812028b3424ba8db730540c07a52b44646e43dc2c043821bbeaf2cc7586acf0dd22cae44ba77e63cfbd85c8174
- SSDEEP 3072:UEz43VWFR6FJ/V1UM181JjYrAAI4b6CMi23BOMu4Xa061:UEN5Jt4b6CM13BPXaf1
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
pid Process 2172 (64-Bit) EDRW Patcher v1.1.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path \Users\Admin\AppData\Local\Temp\dup2patcher.dll
- Size 83KB
- SHA256 e60274a3a84dc5778f321dbdb02f972ba347128e8b2e714e320b61b70b904ffb
- MD5 42f5e710d885590481582aba6f7f4001
- SHA1 72a9681876e36c60cdc576e15634f64534584d5b
- SHA512 4e9730705b5666e90189c4f64cdb5d5f354d70cd1615afa3ebd5bec09d34eade93623e02d46df611736428124cf91a8ee3bbbcc2013d3134f59a545cc3501369
- SSDEEP 1536:P/Tilc2ldltF9j6RW8HAI/1lxC+oU0ODbi9PI:3TYc2ldltF9jWW8HAI/1lxC+oU0ODbo
- MD5 SHA1 SHA512 SSDEEP