Overview

overview

10

Static

static

SecuriteIn...31.exe

windows7_x64

1

SecuriteIn...31.exe

windows10_x64

10

Analysis

  • max time kernel
    37s
  • max time network
    35s
  • platform
    windows7_x64
  • resource
    win7v20201028
  • submitted
    28-01-2021 23:54

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    SecuriteInfo.com.Trojan.PackedNET.503.5.1331.exe

  • Size

    7.7MB

  • MD5

    233052898800d961e4fc3ef2a339f555

  • SHA1

    ac9817107f94a23d2372aac4c796c31b84fe6cd6

  • SHA256

    0e264fd6c9f8b8d5f5765b8cb5e86eb2801a26d3891093954695c688c987b143

  • SHA512

    c1140dcce8fb84d0e73ac28c4a5012d9f541938e038c061681b449a99268f457d3a43423f5ef8f3f33ecfb13d2ce4a5b19d0e26f2156ab5ba52ef9ac9448a01a

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 20 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.PackedNET.503.5.1331.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.PackedNET.503.5.1331.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:1740
    • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.PackedNET.503.5.1331.exe
      "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.PackedNET.503.5.1331.exe"
      2⤵
        PID:1156
      • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.PackedNET.503.5.1331.exe
        "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.PackedNET.503.5.1331.exe"
        2⤵
          PID:1672
        • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.PackedNET.503.5.1331.exe
          "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.PackedNET.503.5.1331.exe"
          2⤵
            PID:1088
          • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.PackedNET.503.5.1331.exe
            "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.PackedNET.503.5.1331.exe"
            2⤵
              PID:1080
            • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.PackedNET.503.5.1331.exe
              "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.PackedNET.503.5.1331.exe"
              2⤵
                PID:332

            Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/1740-2-0x00000000741A0000-0x000000007488E000-memory.dmp
              Filesize

              6.9MB

              Download
            • memory/1740-3-0x0000000000190000-0x0000000000191000-memory.dmp
              Filesize

              4KB

              Download
            • memory/1740-4-0x0000000000EB0000-0x0000000000EB1000-memory.dmp
              Filesize

              4KB

              Download
            • memory/1740-5-0x0000000000B50000-0x0000000000B8E000-memory.dmp
              Filesize

              248KB

              Download