Analysis
- user interaction
yes - max time kernel
16s - max time network
17s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
20/08/2026, 08:16
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ropro-patcher.exe
Resource
win11-20260513-en
1 signatures
900 seconds
General
- Target ropro-patcher.exe
- Size 5.2MB
- Sample260820-j6md6asfpe
- SHA256 46f5c8193c48a88e3852a85a3a6a22a178f593b62e9ad955f3fbc5f5bfbccdab
- MD5 a45a9b8f355e4eba9bb96171f572b3ea
- SHA1 87a8a3acad2b65db9e5ef978d795f4f5e3c89ea5
- SHA512 5afa6388c7d1019eb713efaf4e0daf275e65553152cdab8b06ad253278733e7b1b7a84a99cd059c0cde3ed7d20bf9fe5c7eb3bae1cdc403c7f4b02ff1d933d1c
- SSDEEP 49152:4ksMKU1of3gRlm2enekEWacjeQrLBNCF2Uw5qfzWfE1KlWNz3005xjYmGklytaj/:4id30+nGHHeecFTZOZaG/L1l3QdQE
- TLSH T15B463B217F5A9AEDC09AC074C24647726A7274CA0B35BAFF45C496783E25AF41F3C398
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 1 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 1 raw.githubusercontent.com