General
-
Target
SecuriteInfo.com.Trojan.Siggen9.47262.23815.30640
-
Size
3.8MB
-
Sample
201109-lhz2jbvtra
-
MD5
5cbe538f98b32398b42edcdf102cc98e
-
SHA1
2c1fe0b24421f96708a83baa134160df7fa1b038
-
SHA256
f4be8a038fc4b681a850d8ecaecc1f663d41bf27daf4f1af9c4cee1a3f63ae1a
-
SHA512
e206da1a686bd235f1bddd214303e0b84d1c85b50820ed7f14fb012c33c032570461721790d58a348cb84fd40d2248ad4caffa50fe610bc88b4e3fdedd22ab0a
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.Siggen9.47262.23815.30640.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.Siggen9.47262.23815.30640.exe
Resource
win10v20201028
Malware Config
Targets
-
-
Target
SecuriteInfo.com.Trojan.Siggen9.47262.23815.30640
-
Size
3.8MB
-
MD5
5cbe538f98b32398b42edcdf102cc98e
-
SHA1
2c1fe0b24421f96708a83baa134160df7fa1b038
-
SHA256
f4be8a038fc4b681a850d8ecaecc1f663d41bf27daf4f1af9c4cee1a3f63ae1a
-
SHA512
e206da1a686bd235f1bddd214303e0b84d1c85b50820ed7f14fb012c33c032570461721790d58a348cb84fd40d2248ad4caffa50fe610bc88b4e3fdedd22ab0a
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Modifies boot configuration data using bcdedit
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
JavaScript code in executable
-
Modifies service
-