Analysis
-
max time kernel
102s -
max time network
104s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
21-07-2024 23:56
Behavioral task
behavioral1
Sample
2e3708ab0c33c535e7d062521e8ebca0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e3708ab0c33c535e7d062521e8ebca0N.exe
Resource
win10v2004-20240709-en
General
-
Target
2e3708ab0c33c535e7d062521e8ebca0N.exe
-
Size
9.0MB
-
MD5
2e3708ab0c33c535e7d062521e8ebca0
-
SHA1
371a37b360546915a6274ed6e27f41c9b602dfac
-
SHA256
9d7720bd69aa6a29220376e40e3cbedc37c7ebe8e3989f3526041c02e9fcf401
-
SHA512
43318a9b4baced5e4fe03159aba77de2efd25f6baa719d2cd6fa276328c817b6378fd3fc53422da14026d017fbaa92f602f6b88554f3b3523358563cf172a9c5
-
SSDEEP
196608:3HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHf:3HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHf
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 4792 svrwsc.exe -
resource yara_rule behavioral2/memory/3732-0-0x0000000000400000-0x000000000042B000-memory.dmp upx behavioral2/files/0x000900000002347d-4.dat upx -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\svrwsc.exe 2e3708ab0c33c535e7d062521e8ebca0N.exe File created C:\Windows\SysWOW64\svrwsc.exe svrwsc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2e3708ab0c33c535e7d062521e8ebca0N.exe"C:\Users\Admin\AppData\Local\Temp\2e3708ab0c33c535e7d062521e8ebca0N.exe"1⤵
- Drops file in System32 directory
PID:3732
-
C:\Windows\SysWOW64\svrwsc.exeC:\Windows\SysWOW64\svrwsc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
PID:4792
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9.2MB
MD5da5cf4205643c5e529d24dece5dd5576
SHA1d703c9f7019fec5e8967170a037444e34bcb4f19
SHA256f883b1cb63240cf92025d1932dbccae56b55d613161f5e62430770636c8f1c59
SHA5120ee13cdc88cf4d2d9beb2f2390014e7a835ee4137a7c42133afa80d75b20346a961ae78e77c34deda893f2dc614c037c0f7322bfbf8e5c36fbfb4d5ab96ef0fc