Analysis
- max time kernel
143s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20230831-en - resource tags
- submitted
14/09/2023, 04:38
General
- Target SecuriteInfo.com.Win32.PWSX-gen.23382.11031.exe
- Size 577KB
- Sample230914-e9c8facb68
- SHA256 ab38780451a464e6a292bedd185cfebae8032e19437f01a1e877f87e33bf4ac7
Malware Config
Signatures
- Suspicious use of SetThreadContext 1 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of WriteProcessMemory 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.PWSX-gen.23382.11031.exe"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.PWSX-gen.23382.11031.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.PWSX-gen.23382.11031.exe"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.PWSX-gen.23382.11031.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3040-6-0x0000000074EA0000-0x0000000075650000-memory.dmp
memory/3040-0-0x00000000001E0000-0x0000000000276000-memory.dmp
memory/3040-2-0x00000000051A0000-0x0000000005744000-memory.dmp
memory/3040-3-0x0000000004C90000-0x0000000004D22000-memory.dmp
memory/3040-4-0x0000000004E40000-0x0000000004E50000-memory.dmp
memory/3040-5-0x0000000004C40000-0x0000000004C4A000-memory.dmp
memory/3040-1-0x0000000074EA0000-0x0000000075650000-memory.dmp
memory/3040-7-0x0000000004E40000-0x0000000004E50000-memory.dmp
memory/3040-8-0x0000000008220000-0x00000000082BC000-memory.dmp
memory/3040-11-0x0000000074EA0000-0x0000000075650000-memory.dmp
memory/4764-9-0x0000000000400000-0x0000000000435000-memory.dmp
memory/4764-12-0x0000000000E40000-0x000000000118A000-memory.dmp
memory/4764-13-0x0000000000400000-0x0000000000435000-memory.dmp