Analysis

  • max time kernel
    150s
  • max time network
    149s
  • platform
    windows10_x64
  • resource
    win10
  • submitted
    01-08-2020 19:31

General

  • Target

    SecuriteInfo.com.Trojan.DownLoader33.60708.6200.15325.exe

  • Size

    25KB

  • MD5

    808849de500179ec0fbc82c862f62333

  • SHA1

    f6319f4f42a5406355ba7727a9f2f1937fbac159

  • SHA256

    e0eacfa4cf09057f4392c8f5ee42ad8cb23ac9e63b259ea4907e1966a01ece56

  • SHA512

    e85833a268f34c2bdbc9b83260754c844600fbbe15b577a43caa4c89f74ac25c50d139f77d650bdfac78b12ba424ec3482212bfb4084c32db64e6e4ebb29a063

Score
7/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Drops startup file 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.DownLoader33.60708.6200.15325.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.DownLoader33.60708.6200.15325.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Drops startup file
    PID:3612

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3612-0-0x00000000046F0000-0x00000000046F1000-memory.dmp
    Filesize

    4KB

  • memory/3612-1-0x0000000004EF0000-0x0000000004EF1000-memory.dmp
    Filesize

    4KB

  • memory/3612-2-0x00000000046F0000-0x00000000046F1000-memory.dmp
    Filesize

    4KB