Analysis
- max time kernel
119s - max time network
123s - platform
windows7_x64 - resource
win7-20230712-en - resource tags
- submitted
12/07/2023, 17:34
General
- Target SecuriteInfo.com.Win32.CrypterX-gen.23451.30675.exe
- Size 679KB
- Sample230712-v5ehpsfb71
- SHA256 2dbe70cbbdcaf38adeeb141e74dd76d8c2bf2f3d3ad7d4e9b6ac2b75aac70b53
Malware Config
Signatures
- Suspicious use of SetThreadContext 1 IoCs
- Suspicious behavior: EnumeratesProcesses 3 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of WriteProcessMemory 15 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.CrypterX-gen.23451.30675.exe"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.CrypterX-gen.23451.30675.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.CrypterX-gen.23451.30675.exe"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.CrypterX-gen.23451.30675.exe"2⤵
-
-
C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.CrypterX-gen.23451.30675.exe"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.CrypterX-gen.23451.30675.exe"2⤵
-
-
C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.CrypterX-gen.23451.30675.exe"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.CrypterX-gen.23451.30675.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1668-61-0x0000000000400000-0x000000000042F000-memory.dmp
memory/1668-66-0x0000000000400000-0x000000000042F000-memory.dmp
memory/1668-65-0x0000000000900000-0x0000000000C03000-memory.dmp
memory/1668-64-0x0000000000400000-0x000000000042F000-memory.dmp
memory/1668-63-0x000000007EFDE000-0x000000007EFDF000-memory.dmp
memory/1668-62-0x0000000000400000-0x000000000042F000-memory.dmp
memory/2656-57-0x0000000004E20000-0x0000000004E60000-memory.dmp
memory/2656-60-0x0000000004910000-0x000000000497E000-memory.dmp
memory/2656-59-0x00000000009B0000-0x00000000009BA000-memory.dmp
memory/2656-58-0x0000000000710000-0x0000000000718000-memory.dmp
memory/2656-54-0x0000000000150000-0x00000000001FE000-memory.dmp
memory/2656-56-0x0000000004E20000-0x0000000004E60000-memory.dmp
memory/2656-55-0x0000000000470000-0x0000000000482000-memory.dmp