Analysis
-
max time kernel
145s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
10/10/2023, 10:42
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.SuspectCRC.8106.15821.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.SuspectCRC.8106.15821.exe
Resource
win10v2004-20230915-en
General
-
Target
SecuriteInfo.com.Trojan.SuspectCRC.8106.15821.exe
-
Size
469KB
-
MD5
fda071cd314c32dad3f91e0c6638efd3
-
SHA1
f765f61f7ca510c3274aefed42966410542be5d5
-
SHA256
5aaa352f6bc63d6ac8826f1c534991e4027e9fe1ac0810e13e389b8e9ca51c05
-
SHA512
8e84b419d16565063ab92eb9040234369929ffb24ce7794e346c0d20293aa24361e88578356270bfe02bb3d4bdd3a99835ca4be1cf7e177e61b3122326ed04fa
-
SSDEEP
3072:yNzJHjI21EUsK+hTzYd1K4711Ewmf2O/E9TGMV6:EzJZOwo
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3672 4556 WerFault.exe 84 -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4556 SecuriteInfo.com.Trojan.SuspectCRC.8106.15821.exe 4556 SecuriteInfo.com.Trojan.SuspectCRC.8106.15821.exe 4556 SecuriteInfo.com.Trojan.SuspectCRC.8106.15821.exe 4556 SecuriteInfo.com.Trojan.SuspectCRC.8106.15821.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.SuspectCRC.8106.15821.exe"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.SuspectCRC.8106.15821.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:4556 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4556 -s 26522⤵
- Program crash
PID:3672
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4556 -ip 45561⤵PID:412
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
178B
MD5cd2e0e43980a00fb6a2742d3afd803b8
SHA181ffbd1712afe8cdf138b570c0fc9934742c33c1
SHA256bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
SHA5120344c6b2757d4d787ed4a31ec7043c9dc9bf57017e451f60cecb9ad8f5febf64acf2a6c996346ae4b23297623ebf747954410aee27ee3c2f3c6ccd15a15d0f2d
-
Filesize
8KB
MD5b2b2c34fbd807eb9e3f35d99e8454ebb
SHA1bafa7323ba78915269a87aa0e7e6e7054e9dcbd8
SHA2563d30674ac51edf82717ae0c511ae28960ab9748f4c58fbfc90329e4c4ce61a03
SHA512f854c1a0489c71885cf331eea22afbab8f65f3f38d653baf5ffbb272b02f1379d432c3012ded2d91138c0df1c3eac948c05dd06d515b97ff05dc4042a5d0f5e5
-
Filesize
70KB
MD5ee4ddb0248a08e61d9a7a0b612abc3db
SHA1101c94bbe9505f2d8d9dc3c636a78a7771f6cbb1
SHA256dc87bdd8f6c8d73aab092ce4553a3008da006151d590620ee412e77cfd47cec8
SHA5125edb4973c8a00337063402721f5a42bbcea3f32d28f8f004e7fce6fb39b5204de08e13189e7fa621a1fed6d73fd4d2f15b7c2475e1c3cdd25ef3ffe52ebae810
-
Filesize
4KB
MD5b1c6769dc2493ba4dc97625e813805c4
SHA1eccfca0e135afcbcac9a793074750f1a5d827e10
SHA25688915b40ae5e41f3cd1a16afea2427ad53709ae94f89236860a4d617536e7824
SHA51216e21e87276c40145df7bb00f2b22f15c4a4b4e1a7b6665d611187ac3dffe72770b0bc9408eaf035c6af888edfef81fad3297c52a3574052d9ee4f7be29ce898
-
Filesize
135KB
MD5f4e3a03a3799e95fba268e0d5463142b
SHA1bd3a1f79b241704c4ef62593b0f4a3a14529d347
SHA2566513e54a9af844c40aeb1bd005d86302aea4b78a0f4421a3bbb5d639be4c7dd8
SHA512b0e75a965352e9d3e455ce33842f842522e17724b172383e02a986426622eaaf4d00c5d5c6edcd4c1983e2b5c21e45745591c7a9231f6ad3b35790c588c7f99c