Overview

overview

7

Static

static

3

patch.exe

windows7-x64

7

patch.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-05-2024 14:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    patch.exe

  • Size

    1.5MB

  • MD5

    77920d26c517b7670d21859198690289

  • SHA1

    4e11ae466191aa6218e89b776a7cd9f6c1526e53

  • SHA256

    7910a7d842f4dde6ee10f1c13bb24a3377a506a5606d73c57481be51cd7de55c

  • SHA512

    c7c8bf3d191c70b41b3216bee1c45bbfe9ed63735282a831b86adc045e1fef7a9523963ee6a016c22a51dddf4e3ef24db835db816b09d851982a99c4ef65dc2e

  • SSDEEP

    24576:wk70TrcJwFfiabNLmOA9E76CgO8YeDYYtldv30T2aXTn8CTpriUtK1CmEBiYWq/V:wkQTAJwxb1mOA9E76CgXYkYYHdvybz8O

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 35 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\patch.exe
    "C:\Users\Admin\AppData\Local\Temp\patch.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4664

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4664-0-0x0000000074E7E000-0x0000000074E7F000-memory.dmp

    Filesize

    4KB

    Download

  • memory/4664-1-0x0000000005040000-0x00000000051D0000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/4664-2-0x0000000074E70000-0x0000000075620000-memory.dmp

    Filesize

    7.7MB

    Download

  • memory/4664-3-0x0000000005210000-0x00000000057B4000-memory.dmp

    Filesize

    5.6MB

    Download

  • memory/4664-4-0x0000000074E70000-0x0000000075620000-memory.dmp

    Filesize

    7.7MB

    Download

  • memory/4664-5-0x00000000057C0000-0x000000000594E000-memory.dmp

    Filesize

    1.6MB

    Download

  • memory/4664-7-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-6-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-33-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-42-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-71-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-65-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-63-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-61-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-59-0x0000000074E70000-0x0000000075620000-memory.dmp

    Filesize

    7.7MB

    Download

  • memory/4664-58-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-56-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-52-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-50-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-48-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-46-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-44-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-38-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-36-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-69-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-67-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-54-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-35-0x0000000074E70000-0x0000000075620000-memory.dmp

    Filesize

    7.7MB

    Download

  • memory/4664-40-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-31-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-29-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-27-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-25-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-23-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-21-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-13-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-9-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-20-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-17-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-15-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-11-0x00000000057C0000-0x0000000005948000-memory.dmp

    Filesize

    1.5MB

    Download

  • memory/4664-2094-0x0000000005970000-0x0000000005A02000-memory.dmp

    Filesize

    584KB

    Download

  • memory/4664-2095-0x0000000005B80000-0x0000000005B8A000-memory.dmp

    Filesize

    40KB

    Download

  • memory/4664-2096-0x0000000074E70000-0x0000000075620000-memory.dmp

    Filesize

    7.7MB

    Download

  • memory/4664-2097-0x0000000074E70000-0x0000000075620000-memory.dmp

    Filesize

    7.7MB

    Download

  • memory/4664-2098-0x0000000074E70000-0x0000000075620000-memory.dmp

    Filesize

    7.7MB

    Download