Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
24-05-2024 19:32
General
-
Target
212142fac0cc12f92efb2776927269f41aa5a6bde0bee3ae29638926bde3adb9.exe
-
Size
5.7MB
-
MD5
008b1c8c35a686911728b7a4801ce533
-
SHA1
3b4d78ad91de2e9d901e55c760df1b1fe8683114
-
SHA256
212142fac0cc12f92efb2776927269f41aa5a6bde0bee3ae29638926bde3adb9
-
SHA512
755bf055113e6c0e886bf779d5b1ebdc44f83f5447aad62f2e58ffc315123839a9fa7af69ed53ccc905b1e299a8025be6e3cab7eeb065890d9b5f13ca3e5a70b
-
SSDEEP
98304:llaCCCCCCCCCCCCCCCCCCCCCCCCCCCCCHffffffffffffffffffffffffffffffF:lQCCCCCCCCCCCCCCCCCCCCCCCCCCCCCl
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 3 IoCs
-
Executes dropped EXE 1 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in System32 directory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\212142fac0cc12f92efb2776927269f41aa5a6bde0bee3ae29638926bde3adb9.exe"C:\Users\Admin\AppData\Local\Temp\212142fac0cc12f92efb2776927269f41aa5a6bde0bee3ae29638926bde3adb9.exe"1⤵
- Drops file in System32 directory
-
C:\Windows\SysWOW64\svrwsc.exeC:\Windows\SysWOW64\svrwsc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.1MB
MD5aaa09d1f1f9505e01ca240b4fc866c3f
SHA1e6509d4070be625a02b1d06ad0ac10831e7804b8
SHA256ce1adffd3d8a698234d7b9ee90704535bf1d407619fccd308f7823d695fad337
SHA512df2c7c7115aa9833329215ee28c0ba85803db29421e20a4d31738d250c6f9f87667990e93bb833b4fb256cd8b82f14235dba0a624c40d4797c34a71b9b905a4f
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
20KB
-
Filesize
168KB