82d32f5841ba04262e4b1a15d798cfbd69a4bc9ebd37caf3573818e7a2140639 | Triage™

Analysis

max time kernel
129s
max time network
131s
platform
windows7_x64
resource
win7v20201028
submitted
09/11/2020, 20:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
SecuriteInfo.com.Variant.MSILPerseus.225130.3026.7575.exe
Size 870KB
Sample201109-ejyca2wzkx
SHA256 82d32f5841ba04262e4b1a15d798cfbd69a4bc9ebd37caf3573818e7a2140639
MD5 145dc1bfd96fb13644e764d0032e6c4e
SHA1 15652c5110b51eeab7d023d75a4337de84ef7528
SHA512 a7bd3ffc57c05dab54672f344708478fd4af2635cdedacc8779b55e01ffb6f21cfdcaf7b676269c3ca53f28267c83f48db6e943291f176dcd89e4cc97b4456c6
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1992 wrote to memory of 1836	1992	SecuriteInfo.com.Variant.MSILPerseus.225130.3026.7575.exe	29
PID 1992 wrote to memory of 1836	1992	SecuriteInfo.com.Variant.MSILPerseus.225130.3026.7575.exe	29
PID 1992 wrote to memory of 1836	1992	SecuriteInfo.com.Variant.MSILPerseus.225130.3026.7575.exe	29
PID 1992 wrote to memory of 1836	1992	SecuriteInfo.com.Variant.MSILPerseus.225130.3026.7575.exe	29

C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Variant.MSILPerseus.225130.3026.7575.exe
"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Variant.MSILPerseus.225130.3026.7575.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1992
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe
  dw20.exe -x -s 1012
  2⤵
  PID:1836

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1836-31-0x0000000001EF0000-0x0000000001F01000-memory.dmp

Download