Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
04-10-2024 19:29
General
-
Target
20d97b007866121e693782b5316fe4c489a3d6834feb4179b6c4df8b7b5db6a9.exe
-
Size
9.0MB
-
MD5
6c36c01a6c4c679419601cd20c1e0575
-
SHA1
0d5198675d71d9e888714a8d177f6a3624ce0fdf
-
SHA256
20d97b007866121e693782b5316fe4c489a3d6834feb4179b6c4df8b7b5db6a9
-
SHA512
12a3ca2644cd920a2e314afe246cc3dedceb7e8ce0aa2dc7627a109187ea990fbb1f5b477b1eb71469125fac994eb8b548c48593afbed6117fb434b5bb5142ef
-
SSDEEP
196608:lqmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmzaaaaaaaaaaaaaaaaaaaaaaax:lqmmmmmmmmmmmmmmmmmmmmmmmmmmmmmW
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in System32 directory 2 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\20d97b007866121e693782b5316fe4c489a3d6834feb4179b6c4df8b7b5db6a9.exe"C:\Users\Admin\AppData\Local\Temp\20d97b007866121e693782b5316fe4c489a3d6834feb4179b6c4df8b7b5db6a9.exe"1⤵
- Drops file in System32 directory
-
C:\Windows\SysWOW64\svrwsc.exeC:\Windows\SysWOW64\svrwsc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9.4MB
MD502c65117663059b71ef7840af7c3f7f7
SHA1a4b1af736d2efe6cf697e54cef7da148adea7d58
SHA256b114a8295f04e0a71d19d2ca572a3b24b68b0b5ab7dabb7d6abd3450109da061
SHA51269cebe801a6d915ee0048efd1d4ac9c1deb4b3201a7011a3e0f3f542f57447ccf4562a34e57c1a162a55df91e613a9e0351926ffe261084a7e1b358550ce2cc1
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
20KB
-
Filesize
168KB