Overview

overview

10

Static

static

svcready.docm

windows7-x64

10

svcready.docm

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    svcready.docm

  • Size

    3.3MB

  • Sample

    220816-q74s6acgf9

  • MD5

    a550d7286479cfc2d854fe3b492247de

  • SHA1

    92e06a90d80d80541b8c21ed6bb8a1f3963632b3

  • SHA256

    5803d6dfc18dc228177617921d05fbbc116e83d039f8df75eff3e571dc400424

  • SHA512

    3ea0dfc761b7b3c4d9ee3764f5e7f8da7b2cbbdbfc5e89058a5b39927116c5e0ec2c2b280c6bf375f7687ba975ad5f1eed7549adefe93a72af1ed709c5783a87

  • SSDEEP

    98304:gMPzgC4Z1fMAY5/JtsufA7VzkFVP/TBCN1a1R:n34Z1Du47VzWLiu

Score
10/10
svcreadyloader

Malware Config

Targets

    • Target

      svcready.docm

    • Size

      3.3MB

    • MD5

      a550d7286479cfc2d854fe3b492247de

    • SHA1

      92e06a90d80d80541b8c21ed6bb8a1f3963632b3

    • SHA256

      5803d6dfc18dc228177617921d05fbbc116e83d039f8df75eff3e571dc400424

    • SHA512

      3ea0dfc761b7b3c4d9ee3764f5e7f8da7b2cbbdbfc5e89058a5b39927116c5e0ec2c2b280c6bf375f7687ba975ad5f1eed7549adefe93a72af1ed709c5783a87

    • SSDEEP

      98304:gMPzgC4Z1fMAY5/JtsufA7VzkFVP/TBCN1a1R:n34Z1Du47VzWLiu

    Score
    10/10
    svcreadyloader

    • Detects SVCReady loader

    • SVCReady

      SVCReady is a malware loader first seen in April 2022.

      loadersvcready

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks