Analysis
- max time kernel
121s - max time network
136s - platform
windows10_x64 - resource
win10-en-20211208 - submitted
10/12/2021, 12:36
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe
Resource
win7-en-20211208
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe
Resource
win10-en-20211208
0 signatures
0 seconds
General
- Target SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe
- Size 1.7MB
- Sample211210-psxwmagdf4
- SHA256 4f387257ba2721c27465800f9db3e513ded059ce28b68d593de0f459dfcf95a7
- MD5 61c5dde7b4dbb77058f8aad370e92648
- SHA1 753c4913e5bd73a37c04ec4b180f99aa5d15b2f0
- SHA512 7cc15313ed4c0373112cd08240303f4baae696eb86dd9fcf9d3de6b1773fa0e2a5089b86051fd0c15257b3588fe9135dea559dbc799880c8820bbf6e097d9ae1
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 20 IoCs
pid Process 2416 SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe 2416 SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe 2416 SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe 2416 SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe 2416 SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe 2416 SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe 2416 SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe 2416 SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe 2416 SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe 2416 SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe 2416 SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe 2416 SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe 2416 SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe 2416 SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe 2416 SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe 2416 SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe 2416 SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe 2416 SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe 2416 SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe 2416 SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe - Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 2416 SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe 2416 SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe 2416 SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe - Suspicious use of SendNotifyMessage 3 IoCs
pid Process 2416 SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe 2416 SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe 2416 SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.AutoIt.457.26065.4450.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2416