Overview

overview

1

Static

static

SecuriteIn...31.exe

windows7_x64

1

SecuriteIn...31.exe

windows10_x64

1

Analysis

  • max time kernel
    50s
  • max time network
    59s
  • platform
    windows7_x64
  • resource
    win7v200722
  • submitted
    01-08-2020 19:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    SecuriteInfo.com.Trojan.Siggen9.57461.12541.13331.exe

  • Size

    777KB

  • MD5

    3b5cc52ebfb46933d7665cf6125d9b72

  • SHA1

    aefd3a17e58fd0eb96422d66f06ee75bf0cfee8b

  • SHA256

    48b81558e59b18c3d20b057608cf34821e4dbf7779a69af50530c611dac0738e

  • SHA512

    d94122a450eeae463718801b8d165cd85a2245230e9ce0e4b00f5f657c4c5821015014c6511b8d89c2de449b3046e5c2fae7024667baac6169e01685238a2fe8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 22 IoCs
  • Suspicious use of WriteProcessMemory 9 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.Siggen9.57461.12541.13331.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.Siggen9.57461.12541.13331.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:1244
    • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.Siggen9.57461.12541.13331.exe
      "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.Siggen9.57461.12541.13331.exe"
      2⤵
      • Suspicious behavior: EnumeratesProcesses
      PID:1416

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1416-0-0x0000000000000000-mapping.dmp
    Download
  • memory/1416-1-0x0000000000400000-0x000000000042D000-memory.dmp
    Filesize

    180KB

    Download