Overview

overview

10

Static

static

SecuriteIn...41.exe

windows7_x64

1

SecuriteIn...41.exe

windows10_x64

10

Analysis

  • max time kernel
    63s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7v20210408
  • submitted
    07/05/2021, 02:01

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    SecuriteInfo.com.Trojan.GenericKD.46251898.3849.19641.exe
  • Size 1.3MB
  • Sample210507-gn594e29d2
  • SHA256 8fa5172f19f08577bd48be27c7ca107ffca65581ed595509a17bef3cfe9f236a
  • MD5 SHA1 SHA512
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 12 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 20 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.GenericKD.46251898.3849.19641.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.GenericKD.46251898.3849.19641.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:736
    • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.GenericKD.46251898.3849.19641.exe
      "{path}"
      2⤵
        PID:1440
      • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.GenericKD.46251898.3849.19641.exe
        "{path}"
        2⤵
          PID:1432
        • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.GenericKD.46251898.3849.19641.exe
          "{path}"
          2⤵
            PID:1592
          • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.GenericKD.46251898.3849.19641.exe
            "{path}"
            2⤵
              PID:1640
            • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.GenericKD.46251898.3849.19641.exe
              "{path}"
              2⤵
                PID:1784

            Network

                  MITRE ATT&CK Matrix

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  memory/736-60-0x0000000000360000-0x0000000000361000-memory.dmp
                  Download

                  memory/736-62-0x0000000007140000-0x0000000007141000-memory.dmp
                  Download

                  memory/736-63-0x00000000002D0000-0x00000000002DE000-memory.dmp
                  Download

                  memory/736-64-0x00000000053A0000-0x0000000005431000-memory.dmp
                  Download

                  memory/736-65-0x0000000000610000-0x000000000065E000-memory.dmp
                  Download