5732c82b705016d7bf79058f82f45b01d18d2986fbc8454deeb2894da020a519

Analysis

max time kernel
148s
max time network
152s
platform
windows7_x64
resource
win7-20230621-en
resource tags

arch:x64arch:x86image:win7-20230621-enlocale:en-usos:windows7-x64system
submitted
30/06/2023, 18:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

SecuriteInfo.com.Win64.Malware-gen.24224.22565.exe
Size

12.1MB
MD5

5e6307ff0f896a11cb056cdda2d2bbdc
SHA1

ed7fd7cbeffa04590bb5f2779053ad10a34dcbab
SHA256

5732c82b705016d7bf79058f82f45b01d18d2986fbc8454deeb2894da020a519
SHA512

c9096d46d8185e2cd0487fabd7cc35b194dbc1c4688ad53398192707f206c658b0224883b72284628c95e7dc08560bd4fa8681387c0536f9a86e6f7348f4465c
SSDEEP

393216:zitC2QSz3GhdLC3i99uaEktKVA42Qo1SfGGf:zYCvS6hdLQoB36XTQA

Score

5^/10

Malware Config

Signatures

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1620 set thread context of 2024	1620	SecuriteInfo.com.Win64.Malware-gen.24224.22565.exe	27

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
1620	SecuriteInfo.com.Win64.Malware-gen.24224.22565.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	1620	SecuriteInfo.com.Win64.Malware-gen.24224.22565.exe
Token: SeDebugPrivilege	2024	SecuriteInfo.com.Win64.Malware-gen.24224.22565.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1620 wrote to memory of 2024	1620	SecuriteInfo.com.Win64.Malware-gen.24224.22565.exe	27
PID 1620 wrote to memory of 2024	1620	SecuriteInfo.com.Win64.Malware-gen.24224.22565.exe	27
PID 1620 wrote to memory of 2024	1620	SecuriteInfo.com.Win64.Malware-gen.24224.22565.exe	27
PID 1620 wrote to memory of 2024	1620	SecuriteInfo.com.Win64.Malware-gen.24224.22565.exe	27
PID 1620 wrote to memory of 2024	1620	SecuriteInfo.com.Win64.Malware-gen.24224.22565.exe	27
PID 1620 wrote to memory of 2024	1620	SecuriteInfo.com.Win64.Malware-gen.24224.22565.exe	27
PID 1620 wrote to memory of 2024	1620	SecuriteInfo.com.Win64.Malware-gen.24224.22565.exe	27

C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win64.Malware-gen.24224.22565.exe
"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win64.Malware-gen.24224.22565.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1620
- C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win64.Malware-gen.24224.22565.exe
  C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win64.Malware-gen.24224.22565.exe
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:2024

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1620-54-0x0000000000B00000-0x000000000172A000-memory.dmp

Filesize
12.2MB

Download
memory/1620-55-0x000000001B8B0000-0x000000001B930000-memory.dmp

Filesize
512KB

Download
memory/1620-56-0x000000001B8B0000-0x000000001B930000-memory.dmp

Filesize
512KB

Download
memory/1620-57-0x000000001CA20000-0x000000001CBA0000-memory.dmp

Filesize
1.5MB

Download
memory/1620-59-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-58-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-61-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-65-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-63-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-69-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-67-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-73-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-71-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-75-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-77-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-81-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-79-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-85-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-83-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-89-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-87-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-91-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-95-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-93-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-99-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-97-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-105-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-103-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-101-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-111-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-109-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-107-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-115-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-113-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-121-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-119-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-117-0x000000001CA20000-0x000000001CB9A000-memory.dmp

Filesize
1.5MB

Download
memory/1620-1102-0x000000001CFF0000-0x000000001D0E8000-memory.dmp

Filesize
992KB

Download
memory/1620-1103-0x0000000002D40000-0x0000000002D8C000-memory.dmp

Filesize
304KB

Download
memory/1620-1104-0x0000000000AF0000-0x0000000000AF1000-memory.dmp

Filesize
4KB

Download
memory/1620-1105-0x000000001B8B0000-0x000000001B930000-memory.dmp

Filesize
512KB

Download
memory/1620-1106-0x000000001B8B0000-0x000000001B930000-memory.dmp

Filesize
512KB

Download
memory/1620-1107-0x000000001B8B0000-0x000000001B930000-memory.dmp

Filesize
512KB

Download
memory/1620-1108-0x000000001B8B0000-0x000000001B930000-memory.dmp

Filesize
512KB

Download
memory/2024-1116-0x0000000140000000-0x00000001400D0000-memory.dmp

Filesize
832KB

Download
memory/2024-1117-0x000000001C6E0000-0x000000001C7E6000-memory.dmp

Filesize
1.0MB

Download
memory/2024-1137-0x000000001BF40000-0x000000001BFC0000-memory.dmp

Filesize
512KB

Download
memory/2024-3251-0x0000000000A30000-0x0000000000ACE000-memory.dmp

Filesize
632KB

Download
memory/2024-3252-0x000000001BF40000-0x000000001BFC0000-memory.dmp

Filesize
512KB

Download
memory/2024-3253-0x0000000000660000-0x0000000000686000-memory.dmp

Filesize
152KB

Download