Analysis
-
max time kernel
141s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
06/07/2024, 09:08
Static task
static1
Behavioral task
behavioral1
Sample
Patch.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Patch.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
etbackup_trial.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
etbackup_trial.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
新云软件.url
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
新云软件.url
Resource
win10v2004-20240704-en
General
-
Target
Patch.exe
-
Size
37KB
-
MD5
29382b00bb1c0a0043c4c0c9d8c7ded2
-
SHA1
64db47180bd1dd9bf9dcf21f60cbde3501e37b01
-
SHA256
307a31f07b9b35abb556452efc2dcd00932454c567505757e20f8598348617b2
-
SHA512
8d503112acfc3ca914f57a0ea4de74679dedddd42590ba7e4d924bc829e425c93be7b4f7685cf59abdf7a97c776b34c97e91c1d7259e303b16e20330e617beac
-
SSDEEP
768:LvWoj+WFxiYHV7bKAQqstCHkFHkNgoGyoezEQgvPXGl0Sf1F0:6oj+Cx7HxjQbtJENgRyoezEtXXSD0
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2012 Patch.exe -
Drops file in System32 directory 1 IoCs
description ioc Process File created C:\Windows\SysWOW64\BASSMOD.dll Patch.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2012 Patch.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9KB
MD532c869f491d1a146d0e3d29dff8f2311
SHA127894bd86c0e901711dec05894b4219171f19542
SHA25642f92dbc7baf817703088e411970ac2b168b19c727839d93bc76adcf2a501ca7
SHA51219938d016a4cd30fef59addf5880ea724c37fe64edc80b3602f2e536d0b40cef40db215894483d99579f41bc31b4c7d085b16e3f4142fd7a1fe2009d63704d16