d3fe6a59c1a3513c32f9f4a9213f0238f83c5d051e306b17dfef2d840d314b6a

Resubmissions

19-12-2023 13:59

231219-ral3hscgb3 10

12-10-2023 04:43

231012-fb9peshf62 5

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
12-10-2023 04:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe
Size

1.1MB
MD5

63e139e6777408781e81a119d8162f1f
SHA1

0d5906860a90d6f2bd74c83cdc3441fb6127c658
SHA256

d3fe6a59c1a3513c32f9f4a9213f0238f83c5d051e306b17dfef2d840d314b6a
SHA512

588710ba5b110c26f8ec47d5f7e08da727d62888809468d0d45208aff6988277a74f08cb0b26034e1ea01bcf3e0ac8cfc62f30225972c5d0a5a4c18aac19718d
SSDEEP

24576:HnMFp4xeIzuj3nEG8jaZ5AUPc0Bmew+nK:sFIzuj3nbZFc0wexnK

Score

5^/10

Malware Config

Signatures

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2004 set thread context of 240	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	31

Program crash 2 IoCs

pid	pid_target	Process	procid_target
2380	2004	WerFault.exe	27
2636	240	WerFault.exe	31

Suspicious use of WriteProcessMemory 39 IoCs

description	pid	Process	procid_target
PID 2004 wrote to memory of 2412	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	29
PID 2004 wrote to memory of 2412	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	29
PID 2004 wrote to memory of 2412	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	29
PID 2004 wrote to memory of 2412	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	29
PID 2004 wrote to memory of 2412	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	29
PID 2004 wrote to memory of 2412	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	29
PID 2004 wrote to memory of 2412	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	29
PID 2004 wrote to memory of 1736	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	30
PID 2004 wrote to memory of 1736	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	30
PID 2004 wrote to memory of 1736	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	30
PID 2004 wrote to memory of 1736	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	30
PID 2004 wrote to memory of 1736	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	30
PID 2004 wrote to memory of 1736	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	30
PID 2004 wrote to memory of 1736	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	30
PID 2004 wrote to memory of 240	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	31
PID 2004 wrote to memory of 240	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	31
PID 2004 wrote to memory of 240	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	31
PID 2004 wrote to memory of 240	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	31
PID 2004 wrote to memory of 240	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	31
PID 2004 wrote to memory of 240	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	31
PID 2004 wrote to memory of 240	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	31
PID 2004 wrote to memory of 240	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	31
PID 2004 wrote to memory of 240	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	31
PID 2004 wrote to memory of 240	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	31
PID 2004 wrote to memory of 240	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	31
PID 2004 wrote to memory of 240	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	31
PID 2004 wrote to memory of 240	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	31
PID 2004 wrote to memory of 240	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	31
PID 2004 wrote to memory of 2380	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	32
PID 2004 wrote to memory of 2380	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	32
PID 2004 wrote to memory of 2380	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	32
PID 2004 wrote to memory of 2380	2004	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	32
PID 240 wrote to memory of 2636	240	AppLaunch.exe	33
PID 240 wrote to memory of 2636	240	AppLaunch.exe	33
PID 240 wrote to memory of 2636	240	AppLaunch.exe	33
PID 240 wrote to memory of 2636	240	AppLaunch.exe	33
PID 240 wrote to memory of 2636	240	AppLaunch.exe	33
PID 240 wrote to memory of 2636	240	AppLaunch.exe	33
PID 240 wrote to memory of 2636	240	AppLaunch.exe	33

C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe
"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:2004
- C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
  "C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe"
  2⤵
  PID:2412
- C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
  "C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe"
  2⤵
  PID:1736
- C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
  "C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:240
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 240 -s 196
    3⤵
    - Program crash
    PID:2636
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2004 -s 72
  2⤵
  - Program crash
  PID:2380

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/240-1-0x0000000000400000-0x0000000000433000-memory.dmp

Filesize
204KB

Download
memory/240-0-0x0000000000400000-0x0000000000433000-memory.dmp

Filesize
204KB

Download
memory/240-2-0x0000000000400000-0x0000000000433000-memory.dmp

Filesize
204KB

Download
memory/240-3-0x0000000000400000-0x0000000000433000-memory.dmp

Filesize
204KB

Download
memory/240-5-0x0000000000400000-0x0000000000433000-memory.dmp

Filesize
204KB

Download
memory/240-4-0x0000000000400000-0x0000000000433000-memory.dmp

Filesize
204KB

Download
memory/240-7-0x0000000000400000-0x0000000000433000-memory.dmp

Filesize
204KB

Download
memory/240-6-0x00000000FFFDE000-0x00000000FFFDF000-memory.dmp

Filesize
4KB

Download
memory/240-9-0x0000000000400000-0x0000000000433000-memory.dmp

Filesize
204KB

Download
memory/240-11-0x0000000000400000-0x0000000000433000-memory.dmp

Filesize
204KB

Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads