Overview

overview

8

Static

static

8

Serv-U FTP....1.exe

windows10-2004-x64

7

Serv-U FTP....1.exe

windows11-ltsc_2024-x64

7

setup.exe

windows10-2004-x64

7

setup.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    servU-v6.301H.rar
  • Size 4.0MB
  • Sample260809-wvrkystbmf
  • SHA256 7808ec0e5c494bfabb4afe41c39e6fc8f763820088cb4ffca84cb167a1223300
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoveryrevoked_codesign

Malware Config

Targets

    • Target
      Serv-U FTPServer_v6.3.0.1.exe
    • Size 2.4MB
    • SHA256 c52fc1b11915c55deeb733db5324b7bfde83eb8fa00af592043b12ac67ea965b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2
    • Target
      setup.exe
    • Size 1.7MB
    • SHA256 579f75a7d5d69f257719a3343caad08bdf3d77635111250bdb7ce807584b8eb6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Executes dropped EXE

    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks