Overview

overview

6

Static

static

3

SecuriteIn...02.exe

windows7-x64

6

SecuriteIn...02.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    05/10/2023, 11:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    SecuriteInfo.com.Win32.AdwareX-gen.9637.24802.exe

  • Size

    167KB

  • MD5

    6b227882b2c28140a651f173b7d75455

  • SHA1

    6b94c3c9df8e117ba34904bdbdb0c1151cb77196

  • SHA256

    5ee27e21cc6f3a38c31ae0f0968040b7bd4edf4d51b556665bbd8c78910cbd47

  • SHA512

    e81b4eea11b535759910ef7ee59111d0a85b93f50f91bfe74921abf3b3b8afdc5e0fe785f874f0768e41b78b17515e6cf57186f61bd8af54abe07ebdc852df45

  • SSDEEP

    1536:pvwhlvdQjjWNvPBGlwsuPUyXweZQx+OCC71GFHWGeQQjs+yckU4Ss8jcdsgA0AF2:pYVQO9RTtOZRrjs+0n3sg1AsfHj

Score
6/10
persistence

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.AdwareX-gen.9637.24802.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.AdwareX-gen.9637.24802.exe"
    1⤵
    • Adds Run key to start application
    • Suspicious use of WriteProcessMemory
    PID:1644
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 1644 -s 168
      2⤵
      • Program crash
      PID:2036

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1644-0-0x00000000000F0000-0x00000000000F2000-memory.dmp

    Filesize

    8KB

    Download