Overview

overview

10

Static

static

md-srl.doc...2.docm

windows7-x64

10

md-srl.doc...2.docm

windows10-2004-x64

10

Resubmissions

01-08-2022 11:01

220801-m4llmaffa8 10

29-07-2022 14:36

220729-rylrnaadg3 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    md-srl.doc.29.07.22.doc

  • Size

    3.3MB

  • Sample

    220729-rylrnaadg3

  • MD5

    db56eb8e221935270ee6cd257c0671a3

  • SHA1

    d142fd2ce813175600355b1c12c078f1987dcc16

  • SHA256

    22e39d32024ff7eda327b1a8171b7e8cdd9bb8adeea3b7ec4955e280e8c60b01

  • SHA512

    d26cba8a0786a421a4ff37cb4628f36a0d0a1e47bf01557d9f408088c834c8394a972067b14fea7e0e5590d82b4ec246bd29007cd841ab99dc0adaee7a8a41d8

Score
10/10
svcreadyloader

Malware Config

Targets

    • Target

      md-srl.doc.29.07.22.doc

    • Size

      3.3MB

    • MD5

      db56eb8e221935270ee6cd257c0671a3

    • SHA1

      d142fd2ce813175600355b1c12c078f1987dcc16

    • SHA256

      22e39d32024ff7eda327b1a8171b7e8cdd9bb8adeea3b7ec4955e280e8c60b01

    • SHA512

      d26cba8a0786a421a4ff37cb4628f36a0d0a1e47bf01557d9f408088c834c8394a972067b14fea7e0e5590d82b4ec246bd29007cd841ab99dc0adaee7a8a41d8

    Score
    10/10
    svcreadyloader

    • Detects SVCReady loader

    • SVCReady

      SVCReady is a malware loader first seen in April 2022.

      loadersvcready

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks