Analysis

  • max time kernel
    27s
  • max time network
    30s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2022 08:32

General

  • Target

    SecuriteInfo.com.Win32.InjectorX-gen.8352.9084.exe

  • Size

    30KB

  • MD5

    286caeef4194eae277d7cc6243e03902

  • SHA1

    08c0ebe0df98aaaf7b544d475873d6f83b854603

  • SHA256

    2d3178ac02a97f838ee64643bc6793b0feef8f7a1fd827ee8273cb335b67fe5f

  • SHA512

    395f5d99185d07d0186ce33cd0317aa8406642f26d330949381c717fd7a400aa1fe92b329e166cc23b93c7d2072f62724826e95a4440c540531d0549e672fea0

  • SSDEEP

    768:qD9PEICYxid9LUguy+ezKLn2Ku47PCmCAu:4CkiHUguylCCqu

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.InjectorX-gen.8352.9084.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.InjectorX-gen.8352.9084.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1580
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 1580 -s 200
      2⤵
      • Program crash
      PID:836

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/836-56-0x0000000000000000-mapping.dmp

  • memory/1580-54-0x0000000075C81000-0x0000000075C83000-memory.dmp

    Filesize

    8KB