svcready | 0a3c66a25ee6eb50991ed7e3ffc3637f74048eddb1ae50cba93b073babec94b1 | Triage

Submit
Reports

Overview

overview

Static

static

ino.file.1...2.docm

windows7-x64

ino.file.1...2.docm

windows10-2004-x64

Sharing

General

Target

ino.file.18.07.2022.doc
Size

3.2MB
Sample

220801-3w971sbefp
MD5

24a2c8b07defea8c02cd94d2261ad39f
SHA1

80bb2212fcf06f014b32e05f3e3292c1c7a0f30f
SHA256

0a3c66a25ee6eb50991ed7e3ffc3637f74048eddb1ae50cba93b073babec94b1
SHA512

e59ea046db261607e42e037aa843a37ead8c13dce6c5b217f8a15bdb3d45fb3cda2b2c7bc56944827af1c89529f1d584a33158f843e4acfe9bf522bdf7671c6b

Score

10^/10

svcready loader

Static task

static1

Behavioral task

behavioral1

Sample

ino.file.18.07.2022.docm

Resource

win7-20220718-en

svcready loader

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

ino.file.18.07.2022.docm

Resource

win10v2004-20220721-en

svcready loader

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  ino.file.18.07.2022.doc
- Size
  
  3.2MB
- MD5
  
  24a2c8b07defea8c02cd94d2261ad39f
- SHA1
  
  80bb2212fcf06f014b32e05f3e3292c1c7a0f30f
- SHA256
  
  0a3c66a25ee6eb50991ed7e3ffc3637f74048eddb1ae50cba93b073babec94b1
- SHA512
  
  e59ea046db261607e42e037aa843a37ead8c13dce6c5b217f8a15bdb3d45fb3cda2b2c7bc56944827af1c89529f1d584a33158f843e4acfe9bf522bdf7671c6b
Score

10^/10

svcready loader
- Detects SVCReady loader
- SVCReady
  SVCReady is a malware loader first seen in April 2022.
  loader svcready
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2024

Terms | Privacy