d3fe6a59c1a3513c32f9f4a9213f0238f83c5d051e306b17dfef2d840d314b6a

Resubmissions

19-12-2023 13:59

12-10-2023 04:43

max time kernel
138s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
12-10-2023 04:43

Target

SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe
Size

1.1MB
MD5

63e139e6777408781e81a119d8162f1f
SHA1

0d5906860a90d6f2bd74c83cdc3441fb6127c658
SHA256

d3fe6a59c1a3513c32f9f4a9213f0238f83c5d051e306b17dfef2d840d314b6a
SHA512

588710ba5b110c26f8ec47d5f7e08da727d62888809468d0d45208aff6988277a74f08cb0b26034e1ea01bcf3e0ac8cfc62f30225972c5d0a5a4c18aac19718d
SSDEEP

24576:HnMFp4xeIzuj3nEG8jaZ5AUPc0Bmew+nK:sFIzuj3nbZFc0wexnK

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2368 set thread context of 4772	2368	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	88

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4412	2368	WerFault.exe	82

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 2368 wrote to memory of 4772	2368	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	88
PID 2368 wrote to memory of 4772	2368	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	88
PID 2368 wrote to memory of 4772	2368	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	88
PID 2368 wrote to memory of 4772	2368	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	88
PID 2368 wrote to memory of 4772	2368	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	88
PID 2368 wrote to memory of 4772	2368	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	88
PID 2368 wrote to memory of 4772	2368	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	88
PID 2368 wrote to memory of 4772	2368	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	88
PID 2368 wrote to memory of 4772	2368	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	88
PID 2368 wrote to memory of 4772	2368	SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe	88

C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe
"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.Inject4.62316.3026.27216.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:2368
- C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
  "C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe"
  2⤵
  PID:4772
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2368 -s 252
  2⤵
  - Program crash
  PID:4412

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2368 -ip 2368
1⤵
PID:3756

memory/4772-0-0x0000000000400000-0x0000000000433000-memory.dmp

Filesize
204KB

Download
memory/4772-2-0x0000000000400000-0x0000000000433000-memory.dmp

Filesize
204KB

Download
memory/4772-3-0x0000000000400000-0x0000000000433000-memory.dmp

Filesize
204KB

Download
memory/4772-1-0x0000000000400000-0x0000000000433000-memory.dmp

Filesize
204KB

Download
memory/4772-4-0x0000000000400000-0x0000000000433000-memory.dmp

Filesize
204KB

Download