Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    09-09-2024 11:12

General

  • Target

    c94d2b9a2c1d6eb15412ade390183da0N.exe

  • Size

    6.1MB

  • MD5

    c94d2b9a2c1d6eb15412ade390183da0

  • SHA1

    eb2796ac39c47df3582231607918a27697b0b4a2

  • SHA256

    d9e64fce1e55e91b4e0024da4d37294170a55dc3d83a69c05ed0f9ccaa2a1c0d

  • SHA512

    444036d744c9775e588f6f8e5633e477ec1101c39f32ec12f07d5a99592496c84818d2e07ce5d30468c2f3e6a3bea0e4df6e963ed1abd43cf53a99c6db28bd10

  • SSDEEP

    196608:VsssssssssssssssssssssssssssssssssssssssssssdNNNNNNNNNNNNNNNNNNj:Vssssssssssssssssssssssssssssssu

Score
7/10
upx

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Drops file in System32 directory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c94d2b9a2c1d6eb15412ade390183da0N.exe
    "C:\Users\Admin\AppData\Local\Temp\c94d2b9a2c1d6eb15412ade390183da0N.exe"
    1⤵
    • Drops file in System32 directory
    PID:2524
  • C:\Windows\SysWOW64\svrwsc.exe
    C:\Windows\SysWOW64\svrwsc.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    PID:2536

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Windows\SysWOW64\svrwsc.exe

    Filesize

    6.4MB

    MD5

    b0a281a39603cab3fd86900fb6e5c373

    SHA1

    7352a7c15ac6f25f00122cc40584426e13944b01

    SHA256

    d58bb72d5e0740f233277d858c8d749b0274294e248b6a5672ab881ecd5c6c6a

    SHA512

    8a00e8d3dac17148f5a3fdf2a31c0989e54f53a9532ec730111e1c164c0098e656556f82426642c5bee26a416a49f3d59a956bc66a4d09ce924a75e8812af4af

  • memory/2524-0-0x0000000000400000-0x000000000042B000-memory.dmp

    Filesize

    172KB

  • memory/2524-1-0x00000000003B0000-0x00000000003B5000-memory.dmp

    Filesize

    20KB

  • memory/2524-2-0x0000000000400000-0x000000000042B000-memory.dmp

    Filesize

    172KB

  • memory/2524-8-0x0000000000400000-0x000000000042B000-memory.dmp

    Filesize

    172KB

  • memory/2536-7-0x00000000003B0000-0x00000000003B5000-memory.dmp

    Filesize

    20KB

  • memory/2536-6-0x0000000000400000-0x000000000042B000-memory.dmp

    Filesize

    172KB