Overview

overview

7

Static

static

1

SecuriteIn...41.exe

windows7_x64

SecuriteIn...41.exe

windows10-2004_x64

7

Analysis

  • max time kernel
    92s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    12/07/2022, 12:14

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    SecuriteInfo.com.Gen.Variant.Nemesis.9031.25241.exe
  • Size 201KB
  • Sample220712-pebfgacdc9
  • SHA256 46328084c6b1d250b46ce080d6426e86753df25bcbd6332b253eb578fa789a5e
  • MD5 SHA1 SHA512
Score
7/10
discovery

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in System32 directory 1 IoCs
  • Drops file in Windows directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Gen.Variant.Nemesis.9031.25241.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Gen.Variant.Nemesis.9031.25241.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    • Drops file in Windows directory
    PID:3148

Network

        MITRE ATT&CK Enterprise v6

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        System.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsgFDFD.tmp\System.dll
        • Size 12KB
        • SHA256 c7a20bcaa0197aedddc8e4797bbb33fdf70d980f5e83c203d148121c2106d917
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        memory/3148-131-0x00000000040B0000-0x000000000418B000-memory.dmp
        Download

        memory/3148-132-0x00000000040B0000-0x000000000418B000-memory.dmp
        Download