Analysis
-
max time kernel
16s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
15/07/2024, 21:46
Behavioral task
behavioral1
Sample
14bdd9ad5100c1c657e2790eb0a2b5e0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
14bdd9ad5100c1c657e2790eb0a2b5e0N.exe
Resource
win10v2004-20240709-en
General
-
Target
14bdd9ad5100c1c657e2790eb0a2b5e0N.exe
-
Size
9.8MB
-
MD5
14bdd9ad5100c1c657e2790eb0a2b5e0
-
SHA1
41dd35c98c3d97137d51190908f2c1764a34707c
-
SHA256
a71decbeb968ab13490dbf3ff02b5abf78257f6c5de7bd3d7bc48544ebf505bd
-
SHA512
7d667875e5f95163b2b0acc76417fe031b49ea23711886ec1ef8f8efdb39cc2472b98422c3fedeafd3adbb3e99ba1b7700666b427cebf494059956621b7cd672
-
SSDEEP
196608:HUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU:HUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUT
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 1980 svrwsc.exe -
resource yara_rule behavioral1/memory/2076-0-0x0000000000400000-0x000000000042B000-memory.dmp upx behavioral1/files/0x000b000000012274-4.dat upx behavioral1/memory/1980-5-0x0000000000400000-0x000000000042B000-memory.dmp upx -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\svrwsc.exe svrwsc.exe File created C:\Windows\SysWOW64\svrwsc.exe 14bdd9ad5100c1c657e2790eb0a2b5e0N.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\14bdd9ad5100c1c657e2790eb0a2b5e0N.exe"C:\Users\Admin\AppData\Local\Temp\14bdd9ad5100c1c657e2790eb0a2b5e0N.exe"1⤵
- Drops file in System32 directory
PID:2076
-
C:\Windows\SysWOW64\svrwsc.exeC:\Windows\SysWOW64\svrwsc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
PID:1980
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10.2MB
MD59d41dc475cf15a7259f7db0a0b6e2664
SHA1bc5cf1ec4f12a0a9f25036c837e166626e45f0a0
SHA2563d850f0086e3bf5828d7955794dbc19f49d3446814bf2b262860ed0b68e0ad95
SHA5120f1841b3c6e090aa54c1f37d4d7fbf8c18456b7905e8faf77f985533f57bcaaa74403dd9ed7c7d75ecbd941fa329bfdf800e7fa32b9ce275d4061eaff1751326