Managed XDR

msrsaap.exe (AveMaria) — malware analysis report

File info

Filename
msrsaap.exe
File type
PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
File size
460.5 KB
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
2511adeb0e29edd45e7c59258987e710b3524cff
SHA256
3f5bc2c799a4717aab29000185ffb7eddbf4711039d8e07959af4a817b4f10d8
MD5
e90d2b87137bb80f24fc1b8fa72a4885

Malwares

  • AveMaria

Signatures

Privilege Escalation

T1055 injection_failed: The attempt to inject into a process has failed

Defense Evasion

T1027.002 packer_upx: The executable file is compressed using UPX
T1055 injection_failed: The attempt to inject into a process has failed

Other

yara_rules: Static rules
no_graphical_activity: No graphic activity

Related reports