4544cf2985121fee9b885ba2b1d125cd33e92764220b9329f001cfef5a133ad4 | Triage

Analysis

max time kernel
136s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
23/07/2024, 08:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

smert.exe
Size

141KB
MD5

ad107463c5fbeae2dc0c52f538e03531
SHA1

497d03113de2d2912b343e244a554918d148feb7
SHA256

4544cf2985121fee9b885ba2b1d125cd33e92764220b9329f001cfef5a133ad4
SHA512

7a5439420605641ad4f42a7d94a45abd1bd8da5242dcbd05ba0df63a07d9ab5e76b3405e6c6d77944b488d71b0711b5b64010eb73d60a9e773eda609cfc0ae5e
SSDEEP

3072:TF6qWEs6r5MDBb9UUsMWogJFXID7dNJs8b8aub/b:AK5MDBbWUBcm7XJQb

Score

5^/10

Malware Config

Signatures

Drops file in System32 directory 8 IoCs

description	ioc	Process
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_6372E0472AFF76BB926C97818BC773B9	svchost.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CBDCCBFE4F7A916411C1E69BDD97BB04	svchost.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\FB0D848F74F70BB2EAA93746D24D9749	svchost.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157	svchost.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776	svchost.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506	svchost.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_0FB9553B978E7F00C6B2309507DEB64A	svchost.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_363582827213C09529A76F35FB615187	svchost.exe

C:\Users\Admin\AppData\Local\Temp\smert.exe
"C:\Users\Admin\AppData\Local\Temp\smert.exe"
1⤵
PID:5092

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k NetworkService -p -s CryptSvc
1⤵
- Drops file in System32 directory
PID:2400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2400-8-0x0000027C29DA0000-0x0000027C29DB0000-memory.dmp

Filesize
64KB

Download
memory/2400-2-0x0000027C29D40000-0x0000027C29D50000-memory.dmp

Filesize
64KB

Download