Overview

overview

10

Static

static

ino.file.1...2.docm

windows7-x64

10

ino.file.1...2.docm

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ino.file.18.07.2022.doc

  • Size

    3.2MB

  • Sample

    220801-3w971sbefp

  • MD5

    24a2c8b07defea8c02cd94d2261ad39f

  • SHA1

    80bb2212fcf06f014b32e05f3e3292c1c7a0f30f

  • SHA256

    0a3c66a25ee6eb50991ed7e3ffc3637f74048eddb1ae50cba93b073babec94b1

  • SHA512

    e59ea046db261607e42e037aa843a37ead8c13dce6c5b217f8a15bdb3d45fb3cda2b2c7bc56944827af1c89529f1d584a33158f843e4acfe9bf522bdf7671c6b

Score
10/10
svcreadyloader

Malware Config

Targets

    • Target

      ino.file.18.07.2022.doc

    • Size

      3.2MB

    • MD5

      24a2c8b07defea8c02cd94d2261ad39f

    • SHA1

      80bb2212fcf06f014b32e05f3e3292c1c7a0f30f

    • SHA256

      0a3c66a25ee6eb50991ed7e3ffc3637f74048eddb1ae50cba93b073babec94b1

    • SHA512

      e59ea046db261607e42e037aa843a37ead8c13dce6c5b217f8a15bdb3d45fb3cda2b2c7bc56944827af1c89529f1d584a33158f843e4acfe9bf522bdf7671c6b

    Score
    10/10
    svcreadyloader

    • Detects SVCReady loader

    • SVCReady

      SVCReady is a malware loader first seen in April 2022.

      loadersvcready

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks