Analysis

  • max time kernel
    52s
  • max time network
    74s
  • platform
    windows10_x64
  • resource
    win10v20210408
  • submitted
    18-07-2021 15:46

General

  • Target

    SecuriteInfo.com.Trojan.GenericKD.37253424.5461.14545.exe

  • Size

    635KB

  • MD5

    fcc5aaee3cd020a1be8eec599ad48a06

  • SHA1

    4504807170c1dca310b1f10253186fd3e4664130

  • SHA256

    3a6c6ec5b5e168e0452009714a8d37581459b8d386c26ef69c98a6802d5e65d6

  • SHA512

    dcfeb527d13f68af0ff555a8b4265e1e3f111dd86d922cb4c4eccfca044cafb6d24b551aa8f8e3db7266b5d11a81190cab10a51e843de9cf2fadd496cc1f9544

Score
5/10

Malware Config

Signatures

  • Suspicious use of SetThreadContext 1 IoCs
  • Suspicious use of WriteProcessMemory 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.GenericKD.37253424.5461.14545.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.GenericKD.37253424.5461.14545.exe"
    1⤵
    • Suspicious use of SetThreadContext
    • Suspicious use of WriteProcessMemory
    PID:652
    • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.GenericKD.37253424.5461.14545.exe
      "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.GenericKD.37253424.5461.14545.exe"
      2⤵
        PID:2544

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/652-114-0x00000000003D0000-0x00000000003D1000-memory.dmp

      Filesize

      4KB

    • memory/652-116-0x0000000007190000-0x0000000007191000-memory.dmp

      Filesize

      4KB

    • memory/652-117-0x0000000007730000-0x0000000007731000-memory.dmp

      Filesize

      4KB

    • memory/652-118-0x0000000007230000-0x0000000007231000-memory.dmp

      Filesize

      4KB

    • memory/652-119-0x0000000004CC0000-0x0000000004CC1000-memory.dmp

      Filesize

      4KB

    • memory/652-120-0x0000000007480000-0x0000000007481000-memory.dmp

      Filesize

      4KB

    • memory/652-121-0x0000000007230000-0x000000000772E000-memory.dmp

      Filesize

      5.0MB

    • memory/652-122-0x0000000002710000-0x0000000002721000-memory.dmp

      Filesize

      68KB

    • memory/652-123-0x0000000005180000-0x00000000051C8000-memory.dmp

      Filesize

      288KB

    • memory/652-124-0x00000000051F0000-0x00000000051F5000-memory.dmp

      Filesize

      20KB

    • memory/2544-125-0x0000000000400000-0x0000000000405000-memory.dmp

      Filesize

      20KB

    • memory/2544-127-0x0000000000400000-0x0000000000405000-memory.dmp

      Filesize

      20KB