Analysis
- max time kernel
48s - max time network
45s - platform
windows7_x64 - resource
win7-20220414-en - submitted
03/06/2022, 03:31
General
- Target SecuriteInfo.com.W32.AIDetectNet.01.13080.exe
- Size 592KB
- Sample220603-d22qdsgbc2
- SHA256 db01c721240ccabd4d4679fe63ff5b80ea7a7c770a5d450506fcbc4b79093a31
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 5 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of WriteProcessMemory 35 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.W32.AIDetectNet.01.13080.exe"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.W32.AIDetectNet.01.13080.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe"2⤵
-
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe"2⤵
-
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe"2⤵
-
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe"2⤵
-
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe"2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1960-54-0x0000000001030000-0x00000000010CA000-memory.dmp
memory/1960-55-0x0000000075DE1000-0x0000000075DE3000-memory.dmp
memory/1960-56-0x00000000722C0000-0x000000007364F000-memory.dmp
memory/1960-57-0x00000000718B0000-0x00000000722C0000-memory.dmp
memory/1960-58-0x0000000073EF0000-0x0000000074084000-memory.dmp
memory/1960-60-0x0000000000390000-0x00000000003A6000-memory.dmp
memory/1960-59-0x00000000049E0000-0x0000000004A6E000-memory.dmp
memory/1960-61-0x0000000070B90000-0x00000000718AD000-memory.dmp
memory/1960-62-0x00000000703B0000-0x0000000070B90000-memory.dmp
memory/1960-63-0x0000000073DF0000-0x0000000073EEC000-memory.dmp
memory/1960-64-0x000000006FC70000-0x00000000703AE000-memory.dmp
memory/1960-65-0x00000000722C0000-0x000000007364F000-memory.dmp
memory/1960-66-0x00000000718B0000-0x00000000722C0000-memory.dmp
memory/1960-67-0x0000000073EF0000-0x0000000074084000-memory.dmp
memory/1960-68-0x0000000005AB0000-0x0000000005B32000-memory.dmp
memory/1960-69-0x00000000005F0000-0x0000000000616000-memory.dmp
memory/1960-70-0x00000000722C0000-0x000000007364F000-memory.dmp
memory/1960-71-0x00000000718B0000-0x00000000722C0000-memory.dmp
memory/1960-72-0x0000000073EF0000-0x0000000074084000-memory.dmp
memory/1960-73-0x0000000070B90000-0x00000000718AD000-memory.dmp
memory/1960-74-0x000000006FA90000-0x000000006FC61000-memory.dmp
memory/1960-75-0x000000006F830000-0x000000006F953000-memory.dmp