Analysis
- max time kernel
110s - max time network
110s - platform
windows10_x64 - resource
win10 - submitted
19/07/2020, 12:52
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.BScope.Trojan.Hynamer.23441.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.BScope.Trojan.Hynamer.23441.exe
Resource
win10
0 signatures
0 seconds
General
- Target SecuriteInfo.com.BScope.Trojan.Hynamer.23441.exe
- Size 183KB
- Sample200719-he1c582zea
- SHA256 e02cba19974fd2907cf6bcc094d59fa67fc42a01a6804bbede6e6460206f4019
- MD5 f52ec2b174735cc21aca6f04a2ecad7b
- SHA1 18e89df916c4e164fdb03918fb6cc646eb5742c8
- SHA512 92660d064949b52239840a3fd0533a2258522d0af0c22b32927db16563cc6a1cc161212a1a474249ac7a4df51647a6b232b1211783f69ac717e944dbe9d9bd69
- MD5 SHA1 SHA512
Score
7/10
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 6 IoCs
description pid Process procid_target PID 3672 wrote to memory of 4048 3672 SecuriteInfo.com.BScope.Trojan.Hynamer.23441.exe 67 PID 3672 wrote to memory of 4048 3672 SecuriteInfo.com.BScope.Trojan.Hynamer.23441.exe 67 PID 3672 wrote to memory of 4048 3672 SecuriteInfo.com.BScope.Trojan.Hynamer.23441.exe 67 PID 3672 wrote to memory of 4048 3672 SecuriteInfo.com.BScope.Trojan.Hynamer.23441.exe 67 PID 3672 wrote to memory of 4048 3672 SecuriteInfo.com.BScope.Trojan.Hynamer.23441.exe 67 PID 3672 wrote to memory of 4048 3672 SecuriteInfo.com.BScope.Trojan.Hynamer.23441.exe 67 - Suspicious use of SetThreadContext 1 IoCs
description pid Process procid_target PID 3672 set thread context of 4048 3672 SecuriteInfo.com.BScope.Trojan.Hynamer.23441.exe 67 - Loads dropped DLL 1 IoCs
pid Process 4048 SecuriteInfo.com.BScope.Trojan.Hynamer.23441.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.BScope.Trojan.Hynamer.23441.exe"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.BScope.Trojan.Hynamer.23441.exe"1⤵
- Suspicious use of WriteProcessMemory
- Suspicious use of SetThreadContext
PID:3672 -
C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.BScope.Trojan.Hynamer.23441.exe"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.BScope.Trojan.Hynamer.23441.exe"2⤵
- Loads dropped DLL
PID:4048
-