Overview

overview

7

Static

static

7

SecuriteIn...31.exe

windows7-x64

1

SecuriteIn...31.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    132s
  • max time network
    31s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    08-06-2023 16:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    SecuriteInfo.com.BScope.Trojan.Wacatac.17077.7031.exe

  • Size

    697KB

  • MD5

    28ae9209410e83578989f79bfef08327

  • SHA1

    e934cf0569aea5603e740b675b1ee2026a99f7b3

  • SHA256

    927b02522c72bbef46e7d82880309acfa7c9388b94540f6d19eb484543479e5e

  • SHA512

    e1a03f08bcb20f555514a6278f07b94777a1f2eb0bd6b0505971f81eed148a9fb6091f679280a1ab6d9a36d21b725f10000f804d318db52d01d62028e9237e41

  • SSDEEP

    12288:50/rqJ1QY99L1I8MZ17x2k0jyOZAU/99CYJLfLVYBvGIlUFjUNQ5tYUd9:WiiY9RQ1d23hAO9QYJL5kvGTFjCQLX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.BScope.Trojan.Wacatac.17077.7031.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.BScope.Trojan.Wacatac.17077.7031.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:1304
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x1e0
    1⤵
      PID:1592

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\Wik.CFG
      Filesize

      26B

      MD5

      531e0bcf0039c9d25fbcdca58d756182

      SHA1

      f95dfe368545540a4f21f30b9409e66e8a91e61e

      SHA256

      e9217a1fabd17d12bf7df6558eaad8f3714be96cda2b110564fca26268800fd0

      SHA512

      fa9a3550faac2d00a63d03d777b515e9e082968b40d776957ee22b9b4749d9be376933df8009ba3354a537b4a6b4cb508258b1a5de82d3c5bc59b54ade3c50f4

      Download Submit
    • C:\Users\Admin\AppData\Local\Temp\Wik.CFG
      Filesize

      58B

      MD5

      da3914ab41611e085ceacd4e6dcc20d4

      SHA1

      ec600d6c78465cc917c7dd9a01235cf0206c868a

      SHA256

      07e0d6fcd58d62be839fe5f22cc8a5ed6959b5e963500ebf822c30df98de9282

      SHA512

      fd952fb87c61ebef0d8968c413f06a4399c2c77bb1976798806a6cbd73b5e8901e5ce8eee8d2763fb800de76fc81b3803be97c31a6819af36d8223d67f65c3a5

      Download Submit
    • memory/1304-54-0x0000000000400000-0x00000000006EE000-memory.dmp
      Filesize

      2.9MB

      Download
    • memory/1304-76-0x0000000000400000-0x00000000006EE000-memory.dmp
      Filesize

      2.9MB

      Download