Analysis
- max time kernel
142s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20230831-en - resource tags
arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system - submitted
07/09/2023, 21:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.TrojanX-gen.21761.29978.exe
Resource
win7-20230831-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.TrojanX-gen.21761.29978.exe
Resource
win10v2004-20230831-en
1 signatures
150 seconds
General
- Target SecuriteInfo.com.Win32.TrojanX-gen.21761.29978.exe
- Size 544KB
- Sample230907-1erm8sed5z
- SHA256 667f2d0c934d3ea21a75baf0d955fbc918129f64eb37f2cbdac02e4eb5cccbb2
- MD5 1a497481dac9e4f5ccae89bbd19e3096
- SHA1 920a043ea81e751d550c7aa3a47618a615f13fcf
- SHA512 61c0ec7f14b2bfaad9250b185dc24f45e6771208b48ebcaea263ccc4da2b5bdd91da9600f575477a8825542504105d471b0a38c2c896ea14cfc95b8437eb2307
- SSDEEP 12288:KbxWo9v+Z/FKcP/WePfID3NOFqWxWjYcoERfB3sc5pRHrXJ:gxjlYAcIZOYWyoMBccbR
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 3968 4020 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.TrojanX-gen.21761.29978.exe"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.TrojanX-gen.21761.29978.exe"1⤵PID:4020
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4020 -s 13042⤵
- Program crash
PID:3968
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4020 -ip 40201⤵PID:4452