Analysis

  • max time kernel
    141s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06/07/2024, 09:08

General

  • Target

    Patch.exe

  • Size

    37KB

  • MD5

    29382b00bb1c0a0043c4c0c9d8c7ded2

  • SHA1

    64db47180bd1dd9bf9dcf21f60cbde3501e37b01

  • SHA256

    307a31f07b9b35abb556452efc2dcd00932454c567505757e20f8598348617b2

  • SHA512

    8d503112acfc3ca914f57a0ea4de74679dedddd42590ba7e4d924bc829e425c93be7b4f7685cf59abdf7a97c776b34c97e91c1d7259e303b16e20330e617beac

  • SSDEEP

    768:LvWoj+WFxiYHV7bKAQqstCHkFHkNgoGyoezEQgvPXGl0Sf1F0:6oj+Cx7HxjQbtJENgRyoezEtXXSD0

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Drops file in System32 directory 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Patch.exe
    "C:\Users\Admin\AppData\Local\Temp\Patch.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2012

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Windows\SysWOW64\BASSMOD.dll

          Filesize

          9KB

          MD5

          32c869f491d1a146d0e3d29dff8f2311

          SHA1

          27894bd86c0e901711dec05894b4219171f19542

          SHA256

          42f92dbc7baf817703088e411970ac2b168b19c727839d93bc76adcf2a501ca7

          SHA512

          19938d016a4cd30fef59addf5880ea724c37fe64edc80b3602f2e536d0b40cef40db215894483d99579f41bc31b4c7d085b16e3f4142fd7a1fe2009d63704d16

        • memory/2012-0-0x0000000000400000-0x0000000000424000-memory.dmp

          Filesize

          144KB

        • memory/2012-2-0x00000000001D0000-0x00000000001F4000-memory.dmp

          Filesize

          144KB

        • memory/2012-3-0x00000000001D0000-0x00000000001F4000-memory.dmp

          Filesize

          144KB

        • memory/2012-1-0x00000000001D0000-0x00000000001F4000-memory.dmp

          Filesize

          144KB

        • memory/2012-4-0x00000000001F0000-0x00000000001F2000-memory.dmp

          Filesize

          8KB

        • memory/2012-8-0x0000000000400000-0x0000000000424000-memory.dmp

          Filesize

          144KB

        • memory/2012-19-0x00000000001D0000-0x00000000001F4000-memory.dmp

          Filesize

          144KB

        • memory/2012-21-0x00000000001D0000-0x00000000001F4000-memory.dmp

          Filesize

          144KB

        • memory/2012-20-0x00000000001D0000-0x00000000001F4000-memory.dmp

          Filesize

          144KB