Analysis

  • max time kernel
    14s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    20/07/2024, 22:12

General

  • Target

    1552ec0a1b162307f1ab5e07b703e0a0N.exe

  • Size

    9.4MB

  • MD5

    1552ec0a1b162307f1ab5e07b703e0a0

  • SHA1

    c4e57ce17e0a7ee98024cea0271934274c4508b3

  • SHA256

    022a22076a2dc40a235aaa5d9b6dfd5db04fac44fbfb5e430aa191087aa8c03d

  • SHA512

    a23a8e0d579b06eac2b42499bb705e0d614bc66209420ebd1e8752c6a689aedd137f6bf568d0a67313e311d388de27dd7bdd514e96d42bb6230d037ec00a38f2

  • SSDEEP

    196608:k666666666666666666666666666666666mooooooooooooooooooooooooooooy:k666666666666666666666666666666u

Score
7/10
upx

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Drops file in System32 directory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1552ec0a1b162307f1ab5e07b703e0a0N.exe
    "C:\Users\Admin\AppData\Local\Temp\1552ec0a1b162307f1ab5e07b703e0a0N.exe"
    1⤵
    • Drops file in System32 directory
    PID:1144
  • C:\Windows\SysWOW64\svrwsc.exe
    C:\Windows\SysWOW64\svrwsc.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    PID:2464

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Windows\SysWOW64\svrwsc.exe

    Filesize

    9.7MB

    MD5

    4fa285505d87a79d9002b21ded699c99

    SHA1

    0c8db36b4581d44bdab2ddcbfc63e842a5ba742b

    SHA256

    9be9a28309ec2abc4516d937a42e6f100e1698ef29b7c83eef24efb17e936222

    SHA512

    0765d1a061eeb1540f476deab0f9f3550673ab89935945c1d524678dbcdeb267f169eaf5693108ca0e64fb5c75d4ef6136234e2cf5846f9e6d06ad99f553db55

  • memory/1144-0-0x0000000000400000-0x000000000042B000-memory.dmp

    Filesize

    172KB

  • memory/1144-2-0x0000000000400000-0x000000000042B000-memory.dmp

    Filesize

    172KB

  • memory/1144-1-0x00000000003B0000-0x00000000003B5000-memory.dmp

    Filesize

    20KB

  • memory/1144-9-0x0000000000400000-0x000000000042B000-memory.dmp

    Filesize

    172KB

  • memory/2464-5-0x0000000000400000-0x000000000042B000-memory.dmp

    Filesize

    172KB

  • memory/2464-7-0x0000000000400000-0x000000000042B000-memory.dmp

    Filesize

    172KB