Analysis
-
max time kernel
27s -
max time network
30s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
23-11-2022 08:32
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.InjectorX-gen.8352.9084.exe
Resource
win7-20221111-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.InjectorX-gen.8352.9084.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
SecuriteInfo.com.Win32.InjectorX-gen.8352.9084.exe
-
Size
30KB
-
MD5
286caeef4194eae277d7cc6243e03902
-
SHA1
08c0ebe0df98aaaf7b544d475873d6f83b854603
-
SHA256
2d3178ac02a97f838ee64643bc6793b0feef8f7a1fd827ee8273cb335b67fe5f
-
SHA512
395f5d99185d07d0186ce33cd0317aa8406642f26d330949381c717fd7a400aa1fe92b329e166cc23b93c7d2072f62724826e95a4440c540531d0549e672fea0
-
SSDEEP
768:qD9PEICYxid9LUguy+ezKLn2Ku47PCmCAu:4CkiHUguylCCqu
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 836 1580 WerFault.exe SecuriteInfo.com.Win32.InjectorX-gen.8352.9084.exe -
Suspicious use of WriteProcessMemory 4 IoCs
Processes:
SecuriteInfo.com.Win32.InjectorX-gen.8352.9084.exedescription pid process target process PID 1580 wrote to memory of 836 1580 SecuriteInfo.com.Win32.InjectorX-gen.8352.9084.exe WerFault.exe PID 1580 wrote to memory of 836 1580 SecuriteInfo.com.Win32.InjectorX-gen.8352.9084.exe WerFault.exe PID 1580 wrote to memory of 836 1580 SecuriteInfo.com.Win32.InjectorX-gen.8352.9084.exe WerFault.exe PID 1580 wrote to memory of 836 1580 SecuriteInfo.com.Win32.InjectorX-gen.8352.9084.exe WerFault.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.InjectorX-gen.8352.9084.exe"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.InjectorX-gen.8352.9084.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:1580 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1580 -s 2002⤵
- Program crash
PID:836