Analysis

  • max time kernel
    32s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    16/07/2024, 10:49

General

  • Target

    ab8e463c37c1adec6bc4b07266ca7870N.exe

  • Size

    9.5MB

  • MD5

    ab8e463c37c1adec6bc4b07266ca7870

  • SHA1

    d87251bcfb15c93313c723951d7f9edc9d9a71ed

  • SHA256

    c31e4dbbaa9f05868b4e36e47aff3914204d9f122298b66f1c13565ab40c1648

  • SHA512

    0ae23be09471c00220db8e2be8c772ff952d8582c39943dd9edcecbb893433cb1f5aa0c79ba34dc76db882e5f726eae7eacac441e371ddeec0def80130f54d24

  • SSDEEP

    196608:T55555555555555555555555555555555555555dWWWWWWWWWWWWWWWWWWWWWWWF:T5555555555555555555555555555556

Score
7/10
upx

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Drops file in System32 directory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ab8e463c37c1adec6bc4b07266ca7870N.exe
    "C:\Users\Admin\AppData\Local\Temp\ab8e463c37c1adec6bc4b07266ca7870N.exe"
    1⤵
    • Drops file in System32 directory
    PID:2688
  • C:\Windows\SysWOW64\svrwsc.exe
    C:\Windows\SysWOW64\svrwsc.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    PID:2784

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Windows\SysWOW64\svrwsc.exe

    Filesize

    9.8MB

    MD5

    3e589d0015bd74cdffa5ebffebe4f519

    SHA1

    2138fedfac573b56aae528eeec5074cf0d454629

    SHA256

    e186c29bc43d05746a9683efb40c12db51b1aeec888109b22beeed18f5d59c04

    SHA512

    b04c336788c8882394c333d081fe5ea159e339873366d723cb0452f5bbf520329ab21cd8eb9f8e3f155b96b121ae4fd2148f34d8622e4ab4f1bbc2a9f2ae2652

  • memory/2688-0-0x0000000000400000-0x000000000042B000-memory.dmp

    Filesize

    172KB

  • memory/2688-1-0x00000000003B0000-0x00000000003B5000-memory.dmp

    Filesize

    20KB

  • memory/2688-2-0x0000000000400000-0x000000000042B000-memory.dmp

    Filesize

    172KB

  • memory/2688-8-0x0000000000400000-0x000000000042B000-memory.dmp

    Filesize

    172KB

  • memory/2784-6-0x0000000000400000-0x000000000042B000-memory.dmp

    Filesize

    172KB