Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
07/07/2024, 00:07
Behavioral task
behavioral1
Sample
83f10b0babe3765a1a07e2df1ab1dbaef06d2bdaf4206f1ce7993d5d3a901f42.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
83f10b0babe3765a1a07e2df1ab1dbaef06d2bdaf4206f1ce7993d5d3a901f42.exe
Resource
win10v2004-20240704-en
General
-
Target
83f10b0babe3765a1a07e2df1ab1dbaef06d2bdaf4206f1ce7993d5d3a901f42.exe
-
Size
7.0MB
-
MD5
2a0b42834a060147a56834d308c6db79
-
SHA1
4f01d0051d7df633051ec5228df03f10b4fe6255
-
SHA256
83f10b0babe3765a1a07e2df1ab1dbaef06d2bdaf4206f1ce7993d5d3a901f42
-
SHA512
b52fb17f6d0cdbfd5ab1357226c476cefa37fbba0f225e8b8babf7318783eb8cd930ab3f8d39d82ef2ae9cc9e39a05367eac80abfe910120a2fd39f0e992ed97
-
SSDEEP
196608:5MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM3nnnnnnnnnnnnnnnnnnv:5MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMv
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 2876 svrwsc.exe -
resource yara_rule behavioral1/memory/2756-0-0x0000000000400000-0x000000000042B000-memory.dmp upx behavioral1/files/0x000c000000012283-4.dat upx -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\svrwsc.exe 83f10b0babe3765a1a07e2df1ab1dbaef06d2bdaf4206f1ce7993d5d3a901f42.exe File created C:\Windows\SysWOW64\svrwsc.exe svrwsc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\83f10b0babe3765a1a07e2df1ab1dbaef06d2bdaf4206f1ce7993d5d3a901f42.exe"C:\Users\Admin\AppData\Local\Temp\83f10b0babe3765a1a07e2df1ab1dbaef06d2bdaf4206f1ce7993d5d3a901f42.exe"1⤵
- Drops file in System32 directory
PID:2756
-
C:\Windows\SysWOW64\svrwsc.exeC:\Windows\SysWOW64\svrwsc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
PID:2876
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.3MB
MD58aef6c14f388b277dfe65deeb35d5557
SHA17642382d4d9837b4dc433161ca6881c60629c460
SHA256820e46c3f59f7004e3005a19b74c725510022a391e8f15a972704cc7091a1b08
SHA5128b8d9f9a7907c4b3203a27c869d692aa56d0cb5c58b63cedcaa5f87ccf7942e8461ca81e20908a72332a2438c33c8658da0bc818f8403702a1b508176b8e8024