Overview

overview

8

Static

static

7

780c349cb7...bd.exe

windows7-x64

7

780c349cb7...bd.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$SYSDIR/Dr...RV.sys

windows7-x64

1

$SYSDIR/Dr...RV.sys

windows10-2004-x64

1

ArmAccess.dll

windows7-x64

1

ArmAccess.dll

windows10-2004-x64

1

License.html

windows7-x64

1

License.html

windows10-2004-x64

1

MCFUNC.dll

windows7-x64

1

MCFUNC.dll

windows10-2004-x64

1

MCHelp.chm

windows7-x64

1

MCHelp.chm

windows10-2004-x64

1

MaxCrypt2.exe

windows7-x64

8

MaxCrypt2.exe

windows10-2004-x64

7

MaxDelete.dll

windows7-x64

1

MaxDelete.dll

windows10-2004-x64

1

SysSrvc.exe

windows7-x64

1

SysSrvc.exe

windows10-2004-x64

1

Updates/update.exe

windows7-x64

1

Updates/update.exe

windows10-2004-x64

1

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    144s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/01/2024, 18:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    SysSrvc.exe

  • Size

    200KB

  • MD5

    91ade869ff2952bba1e03475f40e0f07

  • SHA1

    7c8a7798843f122ce74dd3ca2874332de4d73bad

  • SHA256

    739cfd41b887fdb4d5f467f3cf34b40ba589b1b0a85b11fc68f4320c56629c2e

  • SHA512

    6ee582e8573064e760a80a5941e23ca6554f4e536f3c3a464564e4f9febf82da8ea717a3f986199b04ae0b8c7a946469ce239c299dba1667a7cd567202185acb

  • SSDEEP

    3072:tqe7l8jHMLIWOMy+i/j6BOEieIZSmkkUhHraiUqB3ELZh4vM4kPlYnJS/48mlZe+:tHqM0WOL+ib6BOEixbjUvoCnJm48ee+

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\SysSrvc.exe
    "C:\Users\Admin\AppData\Local\Temp\SysSrvc.exe"
    1⤵
      PID:1944

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads