Overview

overview

10

Static

static

SecuriteIn...05.exe

windows7-x64

1

SecuriteIn...05.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    47s
  • max time network
    32s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    17/11/2022, 04:36

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    SecuriteInfo.com.Win32.TrojanX-gen.11481.28705.exe
  • Size 695KB
  • Sample221117-e78xbshf7s
  • SHA256 73fb9642d596a55c8cc98409d3336c27158312cead76a0c39fd4e9de813893b8
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 5 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 20 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.TrojanX-gen.11481.28705.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.TrojanX-gen.11481.28705.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:1292
    • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.TrojanX-gen.11481.28705.exe
      "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.TrojanX-gen.11481.28705.exe"
      2⤵
        PID:1160
      • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.TrojanX-gen.11481.28705.exe
        "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.TrojanX-gen.11481.28705.exe"
        2⤵
          PID:1180
        • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.TrojanX-gen.11481.28705.exe
          "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.TrojanX-gen.11481.28705.exe"
          2⤵
            PID:864
          • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.TrojanX-gen.11481.28705.exe
            "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.TrojanX-gen.11481.28705.exe"
            2⤵
              PID:580
            • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.TrojanX-gen.11481.28705.exe
              "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.TrojanX-gen.11481.28705.exe"
              2⤵
                PID:376

            Network

                  MITRE ATT&CK Matrix

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  memory/1292-54-0x0000000000380000-0x0000000000434000-memory.dmp
                  Download

                  memory/1292-55-0x0000000076381000-0x0000000076383000-memory.dmp
                  Download

                  memory/1292-56-0x0000000005090000-0x0000000005150000-memory.dmp
                  Download

                  memory/1292-57-0x0000000000790000-0x00000000007A8000-memory.dmp
                  Download

                  memory/1292-58-0x0000000000740000-0x000000000074C000-memory.dmp
                  Download

                  memory/1292-59-0x00000000052B0000-0x0000000005324000-memory.dmp
                  Download

                  memory/1292-60-0x00000000008D0000-0x000000000090A000-memory.dmp
                  Download