Overview

overview

8

Static

static

3

ec4a958ab7...dd.exe

windows11-21h2-x64

8

rptcache64.dll

windows11-21h2-x64

1

rtfile32.dll

windows11-21h2-x64

1

rtfile64.dll

windows11-21h2-x64

1

rtinfo32.dll

windows11-21h2-x64

4

rtinfo64.dll

windows11-21h2-x64

4

screenhooks32.dll

windows11-21h2-x64

1

scrnrcd32.dll

windows11-21h2-x64

1

scrnrcd64.dll

windows11-21h2-x64

1

sensinfo32.dll

windows11-21h2-x64

1

sensinfo64.dll

windows11-21h2-x64

1

setuphlpr.dll

windows11-21h2-x64

1

shlext32.dll

windows11-21h2-x64

1

shlext64.dll

windows11-21h2-x64

7

siriuv32.dll

windows11-21h2-x64

1

siriuv64.dll

windows11-21h2-x64

1

sqlcipher32.dll

windows11-21h2-x64

3

sqlcipher64.dll

windows11-21h2-x64

1

sscanner32.dll

windows11-21h2-x64

1

sscanner64.dll

windows11-21h2-x64

1

ssleay32.dll

windows11-21h2-x64

1

ssleay64.dll

windows11-21h2-x64

1

swvv32.sys

windows11-21h2-x64

1

swvv64.sys

windows11-21h2-x64

1

swvv64_win7.sys

windows11-21h2-x64

1

unrar32.dll

windows11-21h2-x64

3

unrar64.dll

windows11-21h2-x64

1

usbmgr32.dll

windows11-21h2-x64

1

usbmgr64.dll

windows11-21h2-x64

1

winpcap_inst.exe

windows11-21h2-x64

8

workflow32.dll

windows11-21h2-x64

1

workflow64.dll

windows11-21h2-x64

1

Analysis

  • max time kernel
    145s
  • max time network
    152s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240419-en
  • resource tags

    arch:x64arch:x86image:win11-20240419-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    28-04-2024 10:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    swvv64.sys

  • Size

    228KB

  • MD5

    38d4705971aa8797bbf154856df90f69

  • SHA1

    05fa1fa1b51e7d29b2819470b4dc6fea6f17292b

  • SHA256

    de0feedf477d4dfc63563bbc974045d63758459abad87b5fed52e670932ff3f5

  • SHA512

    20d2726b7f3eac7ba8390c215d46d392444e32ba4b66333b7f92e87a5b4b7de6a3d26a41808737c076d2a0ec0c07f365f0d9ec76e6fc7f7828fd22ac799dd9ff

  • SSDEEP

    6144:sdI5HdbDwdeYTJhreVIqqDL6Mxlom9fivKXape:4IkMahreVNqn6afiCXB

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\swvv64.sys
    1⤵
      PID:492
      • C:\Users\Admin\AppData\Local\Temp\swvv64.sys
        C:\Users\Admin\AppData\Local\Temp\swvv64.sys
        2⤵
          PID:1820

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1820-0-0x0000000000010000-0x0000000000051000-memory.dmp

        Filesize

        260KB

        Download