Overview

overview

5

Static

static

DWRCS.EXE

windows7_x64

5

DWRCS.EXE

windows10_x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DWRCS.EXE

  • Size

    220KB

  • Sample

    200529-rlmdgmc6bx

  • MD5

    32f228a0e4956acd461f651d8d8c6e8a

  • SHA1

    d24a38f5a86c302c48c8443e0435688235769334

  • SHA256

    82159051dac9a2382c3a9f1ca0408a5e0db9b2f934715f66b7e530cff4272cfc

  • SHA512

    133a7c62bb06e0f40cbc8efee2e79e4cd7488c439bff0005f46d132a1c805af1bb9d48a198b174bc6c6722ce502da0e199ae376cf3a55d92543d51fe9e07af14

Score
5/10
persistence

Malware Config

Targets

    • Target

      DWRCS.EXE

    • Size

      220KB

    • MD5

      32f228a0e4956acd461f651d8d8c6e8a

    • SHA1

      d24a38f5a86c302c48c8443e0435688235769334

    • SHA256

      82159051dac9a2382c3a9f1ca0408a5e0db9b2f934715f66b7e530cff4272cfc

    • SHA512

      133a7c62bb06e0f40cbc8efee2e79e4cd7488c439bff0005f46d132a1c805af1bb9d48a198b174bc6c6722ce502da0e199ae376cf3a55d92543d51fe9e07af14

    Score
    5/10
    persistence

    • Drops file in System32 directory

    • Modifies service

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks