Analysis
-
max time kernel
291s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
09-04-2024 14:23
Static task
static1
Behavioral task
behavioral1
Sample
RADStudio-12-1-29-0-51961-7529-KeyPatch.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
RADStudio-12-1-29-0-51961-7529-KeyPatch.exe
Resource
win10v2004-20240226-en
General
-
Target
RADStudio-12-1-29-0-51961-7529-KeyPatch.exe
-
Size
1.4MB
-
MD5
80c9bc51bbf0a781821639a3969ccf51
-
SHA1
8beb2d5a6010148e9a6a755b5ce788664ec8f0fd
-
SHA256
2f6b3112e2d3711ec39f6b71c931f8b14f5bb1ace62b66242caa99cbc6e6854e
-
SHA512
09f3ed87710530c6c3ccac928a08a0838926bb550db04a9b166031a186d17ee77bf440aa0709414597acf6ccfc2d22a22244e2683eb934f2ecfb66c3dedec1d3
-
SSDEEP
24576:zs9MdH5nhrT8Mi1PJLf1KrpIjqg1OmoMYtPhZuSC6Cee3y80Cnf9GMI3wfhZHZ:zkuhrTG1Kwqg14MYtPhQSN80CnVGMqwp
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2188 RADStudio-12-1-29-0-51961-7529-KeyPatch.exe 2188 RADStudio-12-1-29-0-51961-7529-KeyPatch.exe