Overview

overview

10

Static

static

SecuriteIn...48.exe

windows7_x64

10

SecuriteIn...48.exe

windows10-2004_x64

10

Resubmissions

28-02-2022 18:15

220228-wwd19agcek 10

28-03-2021 20:34

210328-hkenhq92te 3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SecuriteInfo.com.Trojan.Siggen12.45560.23148.430

  • Size

    313KB

  • Sample

    220228-wwd19agcek

  • MD5

    a41a6a4e3cfddfe3e10bdd5323a58d3a

  • SHA1

    a5dc8c3bc109aa0abf9df3b7c86917bc6fd99cac

  • SHA256

    388d18b98704bff34ac1cb0a6603e68ba300205ee2f14e4bf482f1012d933231

  • SHA512

    70ac37285868f1d2ec07aaf87fda3a186222f57942dc421e263f64a48e02fc82e13d4800a2ceffcc11aaa8f5c4bde86b8881229de08947fa9fc89940624d464c

Score
10/10
onlyloggerloader

Malware Config

Targets

    • Target

      SecuriteInfo.com.Trojan.Siggen12.45560.23148.430

    • Size

      313KB

    • MD5

      a41a6a4e3cfddfe3e10bdd5323a58d3a

    • SHA1

      a5dc8c3bc109aa0abf9df3b7c86917bc6fd99cac

    • SHA256

      388d18b98704bff34ac1cb0a6603e68ba300205ee2f14e4bf482f1012d933231

    • SHA512

      70ac37285868f1d2ec07aaf87fda3a186222f57942dc421e263f64a48e02fc82e13d4800a2ceffcc11aaa8f5c4bde86b8881229de08947fa9fc89940624d464c

    Score
    10/10
    onlyloggerloader

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

      loaderonlylogger

    • Suspicious use of NtCreateProcessExOtherParentProcess

    • OnlyLogger Payload

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks