Analysis
-
max time kernel
14s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
20/07/2024, 22:12
Behavioral task
behavioral1
Sample
1552ec0a1b162307f1ab5e07b703e0a0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
1552ec0a1b162307f1ab5e07b703e0a0N.exe
Resource
win10v2004-20240709-en
General
-
Target
1552ec0a1b162307f1ab5e07b703e0a0N.exe
-
Size
9.4MB
-
MD5
1552ec0a1b162307f1ab5e07b703e0a0
-
SHA1
c4e57ce17e0a7ee98024cea0271934274c4508b3
-
SHA256
022a22076a2dc40a235aaa5d9b6dfd5db04fac44fbfb5e430aa191087aa8c03d
-
SHA512
a23a8e0d579b06eac2b42499bb705e0d614bc66209420ebd1e8752c6a689aedd137f6bf568d0a67313e311d388de27dd7bdd514e96d42bb6230d037ec00a38f2
-
SSDEEP
196608:k666666666666666666666666666666666mooooooooooooooooooooooooooooy:k666666666666666666666666666666u
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 2464 svrwsc.exe -
resource yara_rule behavioral1/memory/1144-0-0x0000000000400000-0x000000000042B000-memory.dmp upx behavioral1/files/0x005200000000f5ab-4.dat upx behavioral1/memory/2464-5-0x0000000000400000-0x000000000042B000-memory.dmp upx -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\svrwsc.exe 1552ec0a1b162307f1ab5e07b703e0a0N.exe File created C:\Windows\SysWOW64\svrwsc.exe svrwsc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\1552ec0a1b162307f1ab5e07b703e0a0N.exe"C:\Users\Admin\AppData\Local\Temp\1552ec0a1b162307f1ab5e07b703e0a0N.exe"1⤵
- Drops file in System32 directory
PID:1144
-
C:\Windows\SysWOW64\svrwsc.exeC:\Windows\SysWOW64\svrwsc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
PID:2464
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9.7MB
MD54fa285505d87a79d9002b21ded699c99
SHA10c8db36b4581d44bdab2ddcbfc63e842a5ba742b
SHA2569be9a28309ec2abc4516d937a42e6f100e1698ef29b7c83eef24efb17e936222
SHA5120765d1a061eeb1540f476deab0f9f3550673ab89935945c1d524678dbcdeb267f169eaf5693108ca0e64fb5c75d4ef6136234e2cf5846f9e6d06ad99f553db55