f1573f3604d2665b7bee0b9725ae03b50572446447d8c017d67295123546afd0

Analysis

max time kernel
121s
max time network
144s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
03/11/2023, 03:15

Target

SecuriteInfo.com.Win32.Trojan.PSE.1S437JY.10775.20146.exe
Size

1.3MB
MD5

6953319c4af8ff9cba3875d7282d7117
SHA1

900e8359273446f2fdb2456364bc97965fe974f5
SHA256

f1573f3604d2665b7bee0b9725ae03b50572446447d8c017d67295123546afd0
SHA512

bfe978e5894c1dab490ebfb01c30aeb00aadc8c0f45e0bb8357ebb3bfa40c694d6b73192f23f2b40c20d208a171d725aa8bc13c24e9830f6b33ee436c69f9a0d
SSDEEP

24576:zDqrfBNklfpbqfQ9lsqR9Ai8AtKEJ3xYTG3:zcfBNklfsqsWAiUE1xYT

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2644	2632	WerFault.exe	10

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2632 wrote to memory of 2644	2632	SecuriteInfo.com.Win32.Trojan.PSE.1S437JY.10775.20146.exe	30
PID 2632 wrote to memory of 2644	2632	SecuriteInfo.com.Win32.Trojan.PSE.1S437JY.10775.20146.exe	30
PID 2632 wrote to memory of 2644	2632	SecuriteInfo.com.Win32.Trojan.PSE.1S437JY.10775.20146.exe	30
PID 2632 wrote to memory of 2644	2632	SecuriteInfo.com.Win32.Trojan.PSE.1S437JY.10775.20146.exe	30

C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.Trojan.PSE.1S437JY.10775.20146.exe
"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.Trojan.PSE.1S437JY.10775.20146.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2632
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2632 -s 36
  2⤵
  - Program crash
  PID:2644