Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    07/07/2024, 00:07

General

  • Target

    83f10b0babe3765a1a07e2df1ab1dbaef06d2bdaf4206f1ce7993d5d3a901f42.exe

  • Size

    7.0MB

  • MD5

    2a0b42834a060147a56834d308c6db79

  • SHA1

    4f01d0051d7df633051ec5228df03f10b4fe6255

  • SHA256

    83f10b0babe3765a1a07e2df1ab1dbaef06d2bdaf4206f1ce7993d5d3a901f42

  • SHA512

    b52fb17f6d0cdbfd5ab1357226c476cefa37fbba0f225e8b8babf7318783eb8cd930ab3f8d39d82ef2ae9cc9e39a05367eac80abfe910120a2fd39f0e992ed97

  • SSDEEP

    196608:5MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM3nnnnnnnnnnnnnnnnnnv:5MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMv

Score
7/10
upx

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Drops file in System32 directory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\83f10b0babe3765a1a07e2df1ab1dbaef06d2bdaf4206f1ce7993d5d3a901f42.exe
    "C:\Users\Admin\AppData\Local\Temp\83f10b0babe3765a1a07e2df1ab1dbaef06d2bdaf4206f1ce7993d5d3a901f42.exe"
    1⤵
    • Drops file in System32 directory
    PID:2756
  • C:\Windows\SysWOW64\svrwsc.exe
    C:\Windows\SysWOW64\svrwsc.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    PID:2876

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Windows\SysWOW64\svrwsc.exe

    Filesize

    7.3MB

    MD5

    8aef6c14f388b277dfe65deeb35d5557

    SHA1

    7642382d4d9837b4dc433161ca6881c60629c460

    SHA256

    820e46c3f59f7004e3005a19b74c725510022a391e8f15a972704cc7091a1b08

    SHA512

    8b8d9f9a7907c4b3203a27c869d692aa56d0cb5c58b63cedcaa5f87ccf7942e8461ca81e20908a72332a2438c33c8658da0bc818f8403702a1b508176b8e8024

  • memory/2756-0-0x0000000000400000-0x000000000042B000-memory.dmp

    Filesize

    172KB

  • memory/2756-1-0x00000000003B0000-0x00000000003B5000-memory.dmp

    Filesize

    20KB

  • memory/2756-3-0x0000000000400000-0x000000000042B000-memory.dmp

    Filesize

    172KB

  • memory/2876-5-0x0000000000400000-0x000000000042B000-memory.dmp

    Filesize

    172KB