Overview

overview

7

Static

static

3

028ecdaeb1...0N.exe

windows7-x64

7

028ecdaeb1...0N.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    14s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    29/08/2024, 13:27

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    028ecdaeb1dff34e88f8909e93f75e20N.exe

  • Size

    52KB

  • MD5

    028ecdaeb1dff34e88f8909e93f75e20

  • SHA1

    f7036f03e0cecda9fb5640abe3c232f45fc0a16f

  • SHA256

    4c4cae39c8b7898e95a3fe9b735aec65b60998cc2bb32a91b0b89dbec36f3d29

  • SHA512

    970ed019652bd34a709e0974582c4d061e0f13451d423d22de8b8ec3fa7682f934603a2d75f035f86138f879a60850bbba0c099421fdc225b3ec813a70086cc1

  • SSDEEP

    768:NXZmm1UTOEdB7v8W2PSO8u69jytwLJQtOwI7Tc11paJYu/C3:NpjUNkCuaetw6tjUTZ5/C

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Drops file in System32 directory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\028ecdaeb1dff34e88f8909e93f75e20N.exe
    "C:\Users\Admin\AppData\Local\Temp\028ecdaeb1dff34e88f8909e93f75e20N.exe"
    1⤵
    • Drops file in System32 directory
    PID:3004
  • C:\Windows\SysWOW64\svrwsc.exe
    C:\Windows\SysWOW64\svrwsc.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    PID:3052

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Windows\SysWOW64\svrwsc.exe
          Filesize

          482KB

          MD5

          1ca12084145d6800c04ba03c0b4c4150

          SHA1

          cce97792e0f45dc25ac033bb83c876f06c79f0cd

          SHA256

          67dfba4019dd873d5044aa24b22a58a401b369a9328c8d0b52bb989dbc6d9613

          SHA512

          d4bb6ceab8435dc35ebb57d8dbdb517f8866a6c28f75bc439bdf048752aa2df588c54f88a2a3d0db6ec42cb76cf9ee8ffc6f6be6e73407d783b6d489e04fc6e1

          Download Submit