Overview

overview

10

Static

static

66ef418649...d.docm

windows7-x64

10

66ef418649...d.docm

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7798016127.zip

  • Size

    3.3MB

  • Sample

    220725-ts11hadha8

  • MD5

    633bb60765bfd60568a4b6b434ca37e4

  • SHA1

    165dbae3415f4cce71996bd1b377a7731ce9fbe6

  • SHA256

    850214861a961ea817a3db937f1eaf8b83035bad35bc27d5829f577d79e21307

  • SHA512

    bc9b1bf87be4b1e838ab345dcdeb782a8fae2c6e31b80999383b8eda8d55d9740a4bfac777e7540e5c78881dd5f68b13d054db4efeb5cadbb1ebf03aef04427c

Score
10/10
svcreadyloader

Malware Config

Targets

    • Target

      66ef41864983219306c16626c53422dd17ceef884b54b03badbc3b7fb3ec11ed

    • Size

      3.3MB

    • MD5

      b611c91f4f8a4a6a960a5593763804d3

    • SHA1

      3ffa197ddc94c4f33a6cdf5373cecb6f8d0223fe

    • SHA256

      66ef41864983219306c16626c53422dd17ceef884b54b03badbc3b7fb3ec11ed

    • SHA512

      10a97d482c2477da35191381f59f0a18c7da7b2f2a55ea2da36551f8e555700d5eac7a7084fbd4981b4b6a6a25b1f463044bba9f8329181c89b5880e6ba8cc93

    Score
    10/10
    svcreadyloader

    • Detects SVCReady loader

    • SVCReady

      SVCReady is a malware loader first seen in April 2022.

      loadersvcready

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks