Analysis
-
max time kernel
52s -
max time network
74s -
platform
windows10_x64 -
resource
win10v20210408 -
submitted
18-07-2021 15:46
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.GenericKD.37253424.5461.14545.exe
Resource
win7v20210410
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.GenericKD.37253424.5461.14545.exe
Resource
win10v20210408
0 signatures
0 seconds
General
-
Target
SecuriteInfo.com.Trojan.GenericKD.37253424.5461.14545.exe
-
Size
635KB
-
MD5
fcc5aaee3cd020a1be8eec599ad48a06
-
SHA1
4504807170c1dca310b1f10253186fd3e4664130
-
SHA256
3a6c6ec5b5e168e0452009714a8d37581459b8d386c26ef69c98a6802d5e65d6
-
SHA512
dcfeb527d13f68af0ff555a8b4265e1e3f111dd86d922cb4c4eccfca044cafb6d24b551aa8f8e3db7266b5d11a81190cab10a51e843de9cf2fadd496cc1f9544
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
description pid Process procid_target PID 652 set thread context of 2544 652 SecuriteInfo.com.Trojan.GenericKD.37253424.5461.14545.exe 78 -
Suspicious use of WriteProcessMemory 8 IoCs
description pid Process procid_target PID 652 wrote to memory of 2544 652 SecuriteInfo.com.Trojan.GenericKD.37253424.5461.14545.exe 78 PID 652 wrote to memory of 2544 652 SecuriteInfo.com.Trojan.GenericKD.37253424.5461.14545.exe 78 PID 652 wrote to memory of 2544 652 SecuriteInfo.com.Trojan.GenericKD.37253424.5461.14545.exe 78 PID 652 wrote to memory of 2544 652 SecuriteInfo.com.Trojan.GenericKD.37253424.5461.14545.exe 78 PID 652 wrote to memory of 2544 652 SecuriteInfo.com.Trojan.GenericKD.37253424.5461.14545.exe 78 PID 652 wrote to memory of 2544 652 SecuriteInfo.com.Trojan.GenericKD.37253424.5461.14545.exe 78 PID 652 wrote to memory of 2544 652 SecuriteInfo.com.Trojan.GenericKD.37253424.5461.14545.exe 78 PID 652 wrote to memory of 2544 652 SecuriteInfo.com.Trojan.GenericKD.37253424.5461.14545.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.GenericKD.37253424.5461.14545.exe"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.GenericKD.37253424.5461.14545.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:652 -
C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.GenericKD.37253424.5461.14545.exe"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.GenericKD.37253424.5461.14545.exe"2⤵PID:2544
-