Overview

overview

8

Static

static

SecuriteIn...21.exe

windows7_x64

1

SecuriteIn...21.exe

windows10_x64

8

Analysis

  • max time kernel
    46s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7v200722
  • submitted
    25/08/2020, 23:19

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    SecuriteInfo.com.Trojan.Malware.300983.susgen.9221.exe
  • Size 580KB
  • Sample200825-cemsl5mya2
  • SHA256 3db0ffdac23433607c69a18ed4a3371a4b174672ca5d6424f7b50efa6f29d969
  • MD5 SHA1 SHA512
Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.Malware.300983.susgen.9221.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.Malware.300983.susgen.9221.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:112
    • C:\Windows\system32\cmd.exe
      cmd.exe
      2⤵
        PID:1892
    • C:\Users\Admin\AppData\Local\Temp\securiteinfo.com.trojan.malware.300983.susgen.9221.exe
      C:\Users\Admin\AppData\Local\Temp\securiteinfo.com.trojan.malware.300983.susgen.9221.exe {DB29B7BC-CBAA-48E7-AEFA-344ED4066654}
      1⤵
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1912
      • C:\Windows\system32\cmd.exe
        cmd.exe
        2⤵
          PID:1540

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            memory/112-0-0x0000000001DD0000-0x0000000001E00000-memory.dmp
            Download

            memory/1736-1-0x000007FEF6C00000-0x000007FEF6E7A000-memory.dmp
            Download

            memory/1912-2-0x00000000005A0000-0x00000000005D0000-memory.dmp
            Download