Analysis
-
max time kernel
204s -
max time network
229s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
29-11-2022 13:58
Static task
static1
Behavioral task
behavioral1
Sample
a538bdbf3e71a16ae1d34b5e4227a2de320d80364c8bbf8cf2a1fdafc0ff4bbd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a538bdbf3e71a16ae1d34b5e4227a2de320d80364c8bbf8cf2a1fdafc0ff4bbd.exe
Resource
win10v2004-20221111-en
General
-
Target
a538bdbf3e71a16ae1d34b5e4227a2de320d80364c8bbf8cf2a1fdafc0ff4bbd.exe
-
Size
643KB
-
MD5
0a4c51ee91e3d84b27e03632dd58da60
-
SHA1
ac4c38a303a88e9922b3f122e80a119b39dc4da2
-
SHA256
a538bdbf3e71a16ae1d34b5e4227a2de320d80364c8bbf8cf2a1fdafc0ff4bbd
-
SHA512
4e208ae6cf1205482cf5cbe3270ad108d31a17f6463f3967255af6889cf333f3fa9f185b7a6bd2dc18c66f1767054ebbce5d850168eaa265c6f678c90cd86fbb
-
SSDEEP
12288:miKU0BFtvsPUkGXgDkmBxAJmKVg8zThh6XQ1HoOUAWfTq3N:IVXtyLGwDJkJxVVzXIIHokWfTq
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 688 svhest.exe -
Drops file in System32 directory 3 IoCs
description ioc Process File created C:\Windows\SysWOW64\svhest.exe a538bdbf3e71a16ae1d34b5e4227a2de320d80364c8bbf8cf2a1fdafc0ff4bbd.exe File opened for modification C:\Windows\SysWOW64\svhest.exe a538bdbf3e71a16ae1d34b5e4227a2de320d80364c8bbf8cf2a1fdafc0ff4bbd.exe File opened for modification C:\Windows\SysWOW64\svhest.exe svhest.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\a538bdbf3e71a16ae1d34b5e4227a2de320d80364c8bbf8cf2a1fdafc0ff4bbd.exe"C:\Users\Admin\AppData\Local\Temp\a538bdbf3e71a16ae1d34b5e4227a2de320d80364c8bbf8cf2a1fdafc0ff4bbd.exe"1⤵
- Drops file in System32 directory
PID:3424
-
C:\Windows\SysWOW64\svhest.exeC:\Windows\SysWOW64\svhest.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
PID:688
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
643KB
MD50a4c51ee91e3d84b27e03632dd58da60
SHA1ac4c38a303a88e9922b3f122e80a119b39dc4da2
SHA256a538bdbf3e71a16ae1d34b5e4227a2de320d80364c8bbf8cf2a1fdafc0ff4bbd
SHA5124e208ae6cf1205482cf5cbe3270ad108d31a17f6463f3967255af6889cf333f3fa9f185b7a6bd2dc18c66f1767054ebbce5d850168eaa265c6f678c90cd86fbb
-
Filesize
643KB
MD50a4c51ee91e3d84b27e03632dd58da60
SHA1ac4c38a303a88e9922b3f122e80a119b39dc4da2
SHA256a538bdbf3e71a16ae1d34b5e4227a2de320d80364c8bbf8cf2a1fdafc0ff4bbd
SHA5124e208ae6cf1205482cf5cbe3270ad108d31a17f6463f3967255af6889cf333f3fa9f185b7a6bd2dc18c66f1767054ebbce5d850168eaa265c6f678c90cd86fbb