svcready | f0b819433319a936c3b1e4fe4747fef8081ad827b7d20db5d41856f00c147b18 | Triage

Submit
Reports

Overview

overview

Static

static

almabike_d...2.docm

windows7_x64

almabike_d...2.docm

windows10-2004_x64

Sharing

General

Target

almabike_document_17.06.2022.doc
Size

2.6MB
Sample

220617-lar1wadha3
MD5

81febabf460639ca1aab064221d42164
SHA1

de7690f40cac86d1251b21912558c54c8ff2e7d6
SHA256

f0b819433319a936c3b1e4fe4747fef8081ad827b7d20db5d41856f00c147b18
SHA512

503cb673f154de4297fe02ca55a557188729ff2f0b3fa0438d8cf44989473636ee7faf0e7eca6e18b27de4675b2ba7ee1b60a1f14c0e3fdd39431c761934670f

Score

10^/10

svcready loader

Static task

static1

Behavioral task

behavioral1

Sample

almabike_document_17.06.2022.docm

Resource

win7-20220414-en

svcready loader

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

almabike_document_17.06.2022.docm

Resource

win10v2004-20220414-en

svcready loader

windows10-2004_x64

0 signatures

0 seconds

Malware Config

Targets

- Target
  
  almabike_document_17.06.2022.doc
- Size
  
  2.6MB
- MD5
  
  81febabf460639ca1aab064221d42164
- SHA1
  
  de7690f40cac86d1251b21912558c54c8ff2e7d6
- SHA256
  
  f0b819433319a936c3b1e4fe4747fef8081ad827b7d20db5d41856f00c147b18
- SHA512
  
  503cb673f154de4297fe02ca55a557188729ff2f0b3fa0438d8cf44989473636ee7faf0e7eca6e18b27de4675b2ba7ee1b60a1f14c0e3fdd39431c761934670f
Score

10^/10

svcready loader
- Detects SVCReady loader
- SVCReady
  SVCReady is a malware loader first seen in April 2022.
  loader svcready
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2024

Terms | Privacy