Analysis
-
max time kernel
119s -
max time network
20s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
06/10/2024, 08:56
Static task
static1
Behavioral task
behavioral1
Sample
f53065ae82b5828ed3a088d00ce67d9c9742a02a1415b55bc3211fc75287dbb0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f53065ae82b5828ed3a088d00ce67d9c9742a02a1415b55bc3211fc75287dbb0N.exe
Resource
win10v2004-20240802-en
General
-
Target
f53065ae82b5828ed3a088d00ce67d9c9742a02a1415b55bc3211fc75287dbb0N.exe
-
Size
2.1MB
-
MD5
5d741c46393b227bb1af8708949bf440
-
SHA1
3e80df4c425aad0cf978553a709cd653ada63951
-
SHA256
f53065ae82b5828ed3a088d00ce67d9c9742a02a1415b55bc3211fc75287dbb0
-
SHA512
f2081751f571997ed6f924048a184ee8cc1dd395ab4f08d8ebab91550281b156f74c98a2bbbb7182194819c34a2d341aceb013ef0465a37268d2e74384dc7b5c
-
SSDEEP
49152:uAjzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzuXXXXXXXXXXXXXXXd:vgQQQQQQQQQQQQQQQQQQ/qqqqqqqqqqb
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 2756 svrwsc.exe -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\svrwsc.exe f53065ae82b5828ed3a088d00ce67d9c9742a02a1415b55bc3211fc75287dbb0N.exe File created C:\Windows\SysWOW64\svrwsc.exe svrwsc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\f53065ae82b5828ed3a088d00ce67d9c9742a02a1415b55bc3211fc75287dbb0N.exe"C:\Users\Admin\AppData\Local\Temp\f53065ae82b5828ed3a088d00ce67d9c9742a02a1415b55bc3211fc75287dbb0N.exe"1⤵
- Drops file in System32 directory
PID:3032
-
C:\Windows\SysWOW64\svrwsc.exeC:\Windows\SysWOW64\svrwsc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
PID:2756
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.5MB
MD5982c2b8be8ec177f91b78b28c7e97494
SHA1e29173a459acbede71e7a654ec698b9a9ec8615d
SHA256835d270eddeed40b5f6311f350368bdbe4aa535986a1ae8f5ec88fe6b365267a
SHA512bfe6deef4722b098b9b2644f041822108b0065ae514d73528a449fe1321953b076459d685fb0544dc0a419eb883c3879402cc024c716e24b7f15eda7dc58c9d5