svcready | 00d1502024c0112ec09576a7b5fbbf9400425c9a11d9e758074dfc0d99cef40e | Triage

Submit
Reports

Overview

overview

Static

static

nauticente...7.docm

windows7-x64

8

nauticente...7.docm

windows10-2004-x64

Sharing

General

Target

nauticenter.invoice.22.07.doc
Size

3.3MB
Sample

220725-mck6sahbb7
MD5

b74db217d1a12fe458fba446edd0b7d8
SHA1

277e9bec83085ccef489491ec29958af08d8443e
SHA256

00d1502024c0112ec09576a7b5fbbf9400425c9a11d9e758074dfc0d99cef40e
SHA512

22227c0ef962ee5d2fb63c14be0a03c0c51d4062df616e8d1fe05f9f9b72d7d0edbe204d53430dc47ae5d6046878cb4c21055fc455a35e4ab627376c638871aa

Score

10^/10

svcready loader

Static task

static1

Behavioral task

behavioral1

Sample

nauticenter.invoice.22.07.docm

Resource

win7-20220715-en

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

nauticenter.invoice.22.07.docm

Resource

win10v2004-20220722-en

svcready loader

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  nauticenter.invoice.22.07.doc
- Size
  
  3.3MB
- MD5
  
  b74db217d1a12fe458fba446edd0b7d8
- SHA1
  
  277e9bec83085ccef489491ec29958af08d8443e
- SHA256
  
  00d1502024c0112ec09576a7b5fbbf9400425c9a11d9e758074dfc0d99cef40e
- SHA512
  
  22227c0ef962ee5d2fb63c14be0a03c0c51d4062df616e8d1fe05f9f9b72d7d0edbe204d53430dc47ae5d6046878cb4c21055fc455a35e4ab627376c638871aa
Score

10^/10

svcready loader
- Detects SVCReady loader
- SVCReady
  SVCReady is a malware loader first seen in April 2022.
  loader svcready
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2024

Terms | Privacy