Analysis
-
max time kernel
119s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
14/07/2024, 14:27
Behavioral task
behavioral1
Sample
05085cf27b16756252da882476a1a3b0N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
05085cf27b16756252da882476a1a3b0N.exe
Resource
win10v2004-20240709-en
General
-
Target
05085cf27b16756252da882476a1a3b0N.exe
-
Size
5.8MB
-
MD5
05085cf27b16756252da882476a1a3b0
-
SHA1
1052b9a8cca33a3f99ee065bf3f0c9a97427a1b1
-
SHA256
f73671ceb1a1aab60faf38593282c281877f46c66f3a7ca861dfa75a2d9b9c8c
-
SHA512
52ab41fc2e93736e32b1298cf166a29e657fca7596644f79a1a6a8f8267d1763a17e0e50bc1c30cca937f3b40a21234a91de79c32b110ccaff60abba5764bf90
-
SSDEEP
49152:EnQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQ/:4
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 876 svrwsc.exe -
resource yara_rule behavioral1/memory/2232-0-0x0000000000400000-0x000000000042B000-memory.dmp upx behavioral1/files/0x00080000000120fd-4.dat upx behavioral1/memory/876-5-0x0000000000400000-0x000000000042B000-memory.dmp upx -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\svrwsc.exe 05085cf27b16756252da882476a1a3b0N.exe File created C:\Windows\SysWOW64\svrwsc.exe svrwsc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\05085cf27b16756252da882476a1a3b0N.exe"C:\Users\Admin\AppData\Local\Temp\05085cf27b16756252da882476a1a3b0N.exe"1⤵
- Drops file in System32 directory
PID:2232
-
C:\Windows\SysWOW64\svrwsc.exeC:\Windows\SysWOW64\svrwsc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
PID:876
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.1MB
MD5b50240e78ed40d1118174d7305f37902
SHA13156afba64a940450cbe920442691b8c443162b1
SHA256f75f4c1e5a1acc548a1227f0d2fcbf4e7f68c1f5f824b651666cc5d244ed76d6
SHA512fcd888aca96a8548f9790ce81e41fef4b3be82c4228eaa20a874b81b8bc96a60f180232a0766026a5a687c9ac300c9e15dec34a920308b8affe1e76c91f7ea94