Overview

overview

5

Static

static

SecuriteIn...94.exe

windows7_x64

5

SecuriteIn...94.exe

windows10_x64

5

Analysis

  • max time kernel
    61s
  • max time network
    73s
  • platform
    windows7_x64
  • resource
    win7
  • submitted
    15/07/2020, 10:14

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    SecuriteInfo.com.Trojan.GenericKD.34172603.20458.8194.exe

  • Size

    453KB

  • MD5

    e4b7b53a41e32c329b5edc25a88a1d89

  • SHA1

    5bc3595804bad817a012e087c9e30fe58ccffe65

  • SHA256

    a99c63afeaf9ca1c09ee416f4415b50ec930ab489e3cc29908d7369c4869e500

  • SHA512

    bdde7b1440ab26cd89758369fdb35c82f2610a64f2b7a6da08264c30ff82923dc49ffa48868dcc1905125c88e38c01b91bba2c7b6beb6c381a557a6434372967

Score
5/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of WriteProcessMemory 8 IoCs
  • Suspicious behavior: MapViewOfSection 1 IoCs
  • Suspicious use of SetThreadContext 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.GenericKD.34172603.20458.8194.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.GenericKD.34172603.20458.8194.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    • Suspicious behavior: MapViewOfSection
    • Suspicious use of SetThreadContext
    PID:1544
    • C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
      "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
      2⤵
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:532

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/532-0-0x0000000000400000-0x0000000000450000-memory.dmp

          Filesize

          320KB

          Download

        • memory/532-2-0x0000000000400000-0x0000000000450000-memory.dmp

          Filesize

          320KB

          Download

        • memory/532-3-0x0000000000400000-0x0000000000450000-memory.dmp

          Filesize

          320KB

          Download