609cccd44a03bfd93cef765de354cdb2d3b847d90bc4dca0116ace0b1cfb1bc7 | Triage

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
19/03/2024, 16:58

Sharing

Report Analysis Logs

General

Target

HRSword x64/sysdiag.sys
Size

382KB
MD5

2a0fb63e03560318a8260ef2fbda512a
SHA1

590a92122f5d8e58f9a20de8f69b314a1ebc87e6
SHA256

4959ff5b88fde21f41dcb97f08e8304a0d5d65d1ef0e07729d4c975b88fbc769
SHA512

84d37c8b035caf3935e2d19b96e79ddb3de3bfb285357c3188e8bea19b4aa5012c4602c7298411eb6cecf1db55a86b692f0f57c8d74d7a2830b5eb597270bd3d
SSDEEP

6144:ub2eQgY3cPWsMmpwOW3qwqfzEfzeEHCM8+CmCszvpLI3lBrXt:uvJYWgmp1Q6Ei3mCszeB5

Score

1^/10

Malware Config

Signatures

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\HRSword x64\sysdiag.sys"
1⤵
PID:1740
- C:\Users\Admin\AppData\Local\Temp\HRSword x64\sysdiag.sys
  "C:\Users\Admin\AppData\Local\Temp\HRSword x64\sysdiag.sys"
  2⤵
  PID:2480

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads