Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
15/10/2024, 00:53
Behavioral task
behavioral1
Sample
2602f94bd5c6181b85deefbb6eb31c4a1d4f40762c1325c5151b5db39bc22993N.exe
Resource
win7-20240903-en
General
-
Target
2602f94bd5c6181b85deefbb6eb31c4a1d4f40762c1325c5151b5db39bc22993N.exe
-
Size
9.6MB
-
MD5
2e7412b2cde3b36be288bc0594f91d10
-
SHA1
e3d0ab98f204bd2c81c369979fd74ec31018f87b
-
SHA256
2602f94bd5c6181b85deefbb6eb31c4a1d4f40762c1325c5151b5db39bc22993
-
SHA512
79ba20421131f41b4570c502ce244e164f75aa57c2c142fbb52e3fe5e6284b13fd26ce0ebf96ea4ebd0f5b2e2a410fc5ad33f40c63732f1bdee5622ad667ce3a
-
SSDEEP
98304:QUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUZ:K
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 2372 svrwsc.exe -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\svrwsc.exe 2602f94bd5c6181b85deefbb6eb31c4a1d4f40762c1325c5151b5db39bc22993N.exe File created C:\Windows\SysWOW64\svrwsc.exe svrwsc.exe -
resource yara_rule behavioral1/memory/2628-0-0x0000000000400000-0x000000000042B000-memory.dmp upx behavioral1/files/0x0003000000011ba1-4.dat upx
Processes
-
C:\Users\Admin\AppData\Local\Temp\2602f94bd5c6181b85deefbb6eb31c4a1d4f40762c1325c5151b5db39bc22993N.exe"C:\Users\Admin\AppData\Local\Temp\2602f94bd5c6181b85deefbb6eb31c4a1d4f40762c1325c5151b5db39bc22993N.exe"1⤵
- Drops file in System32 directory
PID:2628
-
C:\Windows\SysWOW64\svrwsc.exeC:\Windows\SysWOW64\svrwsc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
PID:2372
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9.8MB
MD5c8c8d9422a473fe12fb122a4ba000da9
SHA16b70960c7b0f495514be58550c3d20f4b8ebd740
SHA2566ec11ee7e999cc8969e92cfef32a2acd7993b6709ef249ccae88ea2fa94960cd
SHA5126dfc81ef771b0b8168c70a80becab5700e7072d3c6f8ab2504cc7a0eda1570dde57bfa047e14896de73d275703d66344081ab62a86d8630a2b36cce83e9c9e2b