Overview

overview

6

Static

static

3

PATCH.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    PATCH.exe
  • Size 1.1MB
  • Sample260622-bs36ragv2r
  • SHA256 307d93f480684363f7b85cc8bae96639e606df7a47ebda83e7aceae7247e7cd6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discoverymotwphishing

Malware Config

Targets

    • Target
      PATCH.exe
    • Size 1.1MB
    • SHA256 307d93f480684363f7b85cc8bae96639e606df7a47ebda83e7aceae7247e7cd6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discoverymotwphishing

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Mark of the Web detected: This indicates that the page was originally saved or cloned.

      phishingmotw
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks