Analysis
-
max time kernel
96s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
20/07/2024, 05:13
Behavioral task
behavioral1
Sample
5265917c4f508c1d9e2433ec653f7260N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5265917c4f508c1d9e2433ec653f7260N.exe
Resource
win10v2004-20240709-en
General
-
Target
5265917c4f508c1d9e2433ec653f7260N.exe
-
Size
8.4MB
-
MD5
5265917c4f508c1d9e2433ec653f7260
-
SHA1
d27945b15e38ddfc09f26554161e8caf16c6d722
-
SHA256
94caf94578db3581c0238811bf1fe877e5b053829f11106d77d942266829dcc4
-
SHA512
5ba86ba290939f589a5aee49fd48dde464096d1234ace2707efb16538f88d70c49a513f342cb334712706f51d3085e45d0673581d5c64024721495526496acc0
-
SSDEEP
196608:k6666666666666666666666666666666665LLLLLLLLLLLLLLLLLLLLLLLLLLLLE:k6666666666666666666666666666661
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 364 svrwsc.exe -
resource yara_rule behavioral2/memory/380-0-0x0000000000400000-0x000000000042B000-memory.dmp upx behavioral2/files/0x000900000002345f-5.dat upx -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\svrwsc.exe 5265917c4f508c1d9e2433ec653f7260N.exe File created C:\Windows\SysWOW64\svrwsc.exe svrwsc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\5265917c4f508c1d9e2433ec653f7260N.exe"C:\Users\Admin\AppData\Local\Temp\5265917c4f508c1d9e2433ec653f7260N.exe"1⤵
- Drops file in System32 directory
PID:380
-
C:\Windows\SysWOW64\svrwsc.exeC:\Windows\SysWOW64\svrwsc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
PID:364
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8.5MB
MD56f8bd09f95b21530957598a862d9d8cd
SHA15e50a5af583fb639f5f9e518e57c6ff3d5c1cf39
SHA25630120cc738a1149ae8bf13214b84031e04630106ad581ccea681dcc1dbdea562
SHA512a58a83e2425ef37e966d00f76f44a4ab5f020dd0fbb4836f09e44d2ffa35b43ad535846b46ede09365a02acf0fc6850974beeb2729b50d05f8286faaf3af8f5c