Analysis
-
max time kernel
141s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
20/04/2024, 04:34
Behavioral task
behavioral1
Sample
Patch.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Patch.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
setup.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
setup.exe
Resource
win10v2004-20240412-en
General
-
Target
Patch.exe
-
Size
69KB
-
MD5
eda28b5af1456bc55e27ee7d6f1efe71
-
SHA1
1fe321fc6df6a7792c5601d4d80fb45d17010ccd
-
SHA256
14e275fbd2776e956652542b7831ecdd2ecbb2d12eed1bad54027f03a9529078
-
SHA512
1935c6d49fbcdcc77e64a8b8bac908cc9254819b3a62eb6f41e1efddf169385bf742c5174fbf9b6960a93cc327c495f91fd6cab7e604edba7ef135c6d4869fde
-
SSDEEP
1536:6YEDE240nr8vpf/GbTjI1peSQqfTGSK8s1LUBs/L5JLvut/L:/2r8vpGbTjINtfTBsjdJvut
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2184 Patch.exe -
resource yara_rule behavioral1/memory/2184-0-0x0000000000400000-0x0000000000434000-memory.dmp upx behavioral1/memory/2184-6-0x0000000000400000-0x0000000000434000-memory.dmp upx -
Drops file in System32 directory 1 IoCs
description ioc Process File created C:\Windows\SysWOW64\BASSMOD.dll Patch.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
14KB
MD5ccec435ed573a5c0d7fa0cf4d95f7aea
SHA175a1efd168d654ff58f3d584e0180d4612b85ca2
SHA2565b4e3dc27cf787dca265f05f132516a16d7042bf2f4abdf3f7531870e71fcf29
SHA5122a552a9c578b6d08c2bbe98d869db42425841846d2f1d67b0e4847d7765200dc7467f783d8722a4e98bc040af099be940a15b7cac157777794aadf180954e3b2