Overview

overview

5

Static

static

SecuriteIn...94.exe

windows7_x64

5

SecuriteIn...94.exe

windows10_x64

5

Analysis

  • max time kernel
    66s
  • max time network
    68s
  • platform
    windows10_x64
  • resource
    win10v200430
  • submitted
    15/07/2020, 10:14

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    SecuriteInfo.com.Trojan.GenericKD.34172603.20458.8194.exe

  • Size

    453KB

  • MD5

    e4b7b53a41e32c329b5edc25a88a1d89

  • SHA1

    5bc3595804bad817a012e087c9e30fe58ccffe65

  • SHA256

    a99c63afeaf9ca1c09ee416f4415b50ec930ab489e3cc29908d7369c4869e500

  • SHA512

    bdde7b1440ab26cd89758369fdb35c82f2610a64f2b7a6da08264c30ff82923dc49ffa48868dcc1905125c88e38c01b91bba2c7b6beb6c381a557a6434372967

Score
5/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs
  • Suspicious behavior: MapViewOfSection 2 IoCs
  • Suspicious use of SetThreadContext 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.GenericKD.34172603.20458.8194.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.GenericKD.34172603.20458.8194.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    • Suspicious behavior: MapViewOfSection
    • Suspicious use of SetThreadContext
    PID:428
    • C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
      "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
      2⤵
        PID:644
      • C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
        "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
        2⤵
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious behavior: EnumeratesProcesses
        PID:648

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/648-0-0x0000000000400000-0x0000000000450000-memory.dmp

            Filesize

            320KB

            Download