Analysis
-
max time kernel
161s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
-
submitted
07-11-2023 14:48
General
-
Target
Serv-U/ServUDaemon.exe
-
Size
299KB
-
MD5
f915567a70c18f2124d7825d691ed2ef
-
SHA1
d0edca33cea8be02fd874389d637ab23fc05010a
-
SHA256
18b6bec83992cc62d97ea016a3a3aa56a690fc3314a70da095678919140ea0bf
-
SHA512
32f6123b3f372f49015b0de93c1be0e16b6de65f597652d5cfda092c333aac7f025ea5f70c008c1cb85304c385269e0f9dbbde22881ebe1d8630047a462fec23
-
SSDEEP
6144:T00L77e1r3+YrxZJWVGTp5Ohoq5P/W8XaMPlmwGlBndJrfnSx6dGUJX:TxL7+TdWUpCoq5nHXAplBdBJT
Malware Config
Signatures
-
UPX packed file 12 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Serv-U\ServUDaemon.exe"C:\Users\Admin\AppData\Local\Temp\Serv-U\ServUDaemon.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
43B
MD511a69e661526d74ee8aa43b01888d5db
SHA15017b35336b018a79efa9a5e6f1666ce7c3e1615
SHA256ba69a65077412c880cde06c584ab1800dd70ad1b856fac4a9b74e44aa63c533d
SHA512dfebbf4e044a084a909a511621bc742d7ac30f3a3332694a3a530c0dfa0603362babcfcc6fc591a96f74a99649a3808fd20050d53c81b3068c89608df421870a
-
Filesize
864KB
-
Filesize
864KB
-
Filesize
1000KB
-
Filesize
192KB
-
Filesize
864KB
-
Filesize
864KB
-
Filesize
76KB
-
Filesize
864KB
-
Filesize
864KB
-
Filesize
864KB
-
Filesize
864KB
-
Filesize
864KB
-
Filesize
864KB
-
Filesize
864KB
-
Filesize
864KB