Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    15/10/2024, 00:53

General

  • Target

    2602f94bd5c6181b85deefbb6eb31c4a1d4f40762c1325c5151b5db39bc22993N.exe

  • Size

    9.6MB

  • MD5

    2e7412b2cde3b36be288bc0594f91d10

  • SHA1

    e3d0ab98f204bd2c81c369979fd74ec31018f87b

  • SHA256

    2602f94bd5c6181b85deefbb6eb31c4a1d4f40762c1325c5151b5db39bc22993

  • SHA512

    79ba20421131f41b4570c502ce244e164f75aa57c2c142fbb52e3fe5e6284b13fd26ce0ebf96ea4ebd0f5b2e2a410fc5ad33f40c63732f1bdee5622ad667ce3a

  • SSDEEP

    98304:QUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUZ:K

Score
7/10
upx

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Drops file in System32 directory 2 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2602f94bd5c6181b85deefbb6eb31c4a1d4f40762c1325c5151b5db39bc22993N.exe
    "C:\Users\Admin\AppData\Local\Temp\2602f94bd5c6181b85deefbb6eb31c4a1d4f40762c1325c5151b5db39bc22993N.exe"
    1⤵
    • Drops file in System32 directory
    PID:2628
  • C:\Windows\SysWOW64\svrwsc.exe
    C:\Windows\SysWOW64\svrwsc.exe
    1⤵
    • Executes dropped EXE
    • Drops file in System32 directory
    PID:2372

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Windows\SysWOW64\svrwsc.exe

          Filesize

          9.8MB

          MD5

          c8c8d9422a473fe12fb122a4ba000da9

          SHA1

          6b70960c7b0f495514be58550c3d20f4b8ebd740

          SHA256

          6ec11ee7e999cc8969e92cfef32a2acd7993b6709ef249ccae88ea2fa94960cd

          SHA512

          6dfc81ef771b0b8168c70a80becab5700e7072d3c6f8ab2504cc7a0eda1570dde57bfa047e14896de73d275703d66344081ab62a86d8630a2b36cce83e9c9e2b

        • memory/2372-7-0x00000000003B0000-0x00000000003B5000-memory.dmp

          Filesize

          20KB

        • memory/2372-6-0x0000000000400000-0x000000000042B000-memory.dmp

          Filesize

          172KB

        • memory/2628-0-0x0000000000400000-0x000000000042B000-memory.dmp

          Filesize

          172KB

        • memory/2628-1-0x00000000003B0000-0x00000000003B5000-memory.dmp

          Filesize

          20KB

        • memory/2628-2-0x0000000000400000-0x000000000042B000-memory.dmp

          Filesize

          172KB

        • memory/2628-8-0x0000000000400000-0x000000000042B000-memory.dmp

          Filesize

          172KB