Analysis
-
max time kernel
94s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
23/05/2024, 01:47
Behavioral task
behavioral1
Sample
ace9c19902c5ad19cc708bac4a2c053bc14fab24b242bed75e4d34f54025d428.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ace9c19902c5ad19cc708bac4a2c053bc14fab24b242bed75e4d34f54025d428.exe
Resource
win10v2004-20240508-en
General
-
Target
ace9c19902c5ad19cc708bac4a2c053bc14fab24b242bed75e4d34f54025d428.exe
-
Size
9.0MB
-
MD5
f05539fe6ad5550bee91d16887cb4aba
-
SHA1
59facc5b81df461d4ede5606869e370034aef62c
-
SHA256
ace9c19902c5ad19cc708bac4a2c053bc14fab24b242bed75e4d34f54025d428
-
SHA512
32a6c0cdbcc46017f2c9acc45b0fe44b87840a34ed3c9800fab768b2512cbdbafe76c2fcb6e4b69e2037f85cfd51ec4b83b19539d88aadb45679c6f75bef1321
-
SSDEEP
196608:jxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxQ:a
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 2 IoCs
resource yara_rule behavioral2/memory/4980-0-0x0000000000400000-0x000000000042B000-memory.dmp UPX behavioral2/files/0x0006000000023270-4.dat UPX -
Executes dropped EXE 1 IoCs
pid Process 1936 svrwsc.exe -
resource yara_rule behavioral2/memory/4980-0-0x0000000000400000-0x000000000042B000-memory.dmp upx behavioral2/files/0x0006000000023270-4.dat upx -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\svrwsc.exe ace9c19902c5ad19cc708bac4a2c053bc14fab24b242bed75e4d34f54025d428.exe File created C:\Windows\SysWOW64\svrwsc.exe svrwsc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\ace9c19902c5ad19cc708bac4a2c053bc14fab24b242bed75e4d34f54025d428.exe"C:\Users\Admin\AppData\Local\Temp\ace9c19902c5ad19cc708bac4a2c053bc14fab24b242bed75e4d34f54025d428.exe"1⤵
- Drops file in System32 directory
PID:4980
-
C:\Windows\SysWOW64\svrwsc.exeC:\Windows\SysWOW64\svrwsc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
PID:1936
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9.2MB
MD5ae6dad1f8b202ef4e59410d91c6d69ba
SHA176195f2aed33f70cfb24d526b65e5bfa08f9de43
SHA256d1a2a59ee3c56c9eb0e4d146b5a75f9326fa5f46ffc15e13537ec51d2a2e7fdf
SHA512b914b8b652c822822a478100fe9fed3fd59de647b0c53023573a9606115ebb0e54a3e39924aa2fc1ded19604fa879dcfc50f04f1e6a4a6391b874aa2113e799a