Overview

overview

7

Static

static

7

SecuriteIn...31.exe

windows7-x64

1

SecuriteIn...31.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    135s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08-06-2023 16:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    SecuriteInfo.com.BScope.Trojan.Wacatac.17077.7031.exe

  • Size

    697KB

  • MD5

    28ae9209410e83578989f79bfef08327

  • SHA1

    e934cf0569aea5603e740b675b1ee2026a99f7b3

  • SHA256

    927b02522c72bbef46e7d82880309acfa7c9388b94540f6d19eb484543479e5e

  • SHA512

    e1a03f08bcb20f555514a6278f07b94777a1f2eb0bd6b0505971f81eed148a9fb6091f679280a1ab6d9a36d21b725f10000f804d318db52d01d62028e9237e41

  • SSDEEP

    12288:50/rqJ1QY99L1I8MZ17x2k0jyOZAU/99CYJLfLVYBvGIlUFjUNQ5tYUd9:WiiY9RQ1d23hAO9QYJL5kvGTFjCQLX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.BScope.Trojan.Wacatac.17077.7031.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.BScope.Trojan.Wacatac.17077.7031.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2120

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\Wik.CFG
    Filesize

    39B

    MD5

    a82a32ed0597fc98ed8a963a999952c6

    SHA1

    fa44787676941db66ec63a3d81d48453af822016

    SHA256

    9aec4366d27560ad06d422630d1bbc3a492e6bb34de41a0f608db76ee79f210d

    SHA512

    de2684fa70dff3a1bd435746af4c32b90d253be127fc7305b27f9902b0e67e3915523311cdbe267212ea93f90aafd00e155499d8d9899451007d2d7e5834087f

    Download Submit
  • C:\Users\Admin\AppData\Local\Temp\Wik.CFG
    Filesize

    58B

    MD5

    da3914ab41611e085ceacd4e6dcc20d4

    SHA1

    ec600d6c78465cc917c7dd9a01235cf0206c868a

    SHA256

    07e0d6fcd58d62be839fe5f22cc8a5ed6959b5e963500ebf822c30df98de9282

    SHA512

    fd952fb87c61ebef0d8968c413f06a4399c2c77bb1976798806a6cbd73b5e8901e5ce8eee8d2763fb800de76fc81b3803be97c31a6819af36d8223d67f65c3a5

    Download Submit
  • memory/2120-133-0x0000000000400000-0x00000000006EE000-memory.dmp
    Filesize

    2.9MB

    Download
  • memory/2120-155-0x0000000000400000-0x00000000006EE000-memory.dmp
    Filesize

    2.9MB

    Download