Overview

overview

7

Static

static

3

SecuriteIn...20.exe

windows7-x64

7

SecuriteIn...20.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    SecuriteInfo.com.FileRepMalware.17033.29620.exe

  • Size

    4.7MB

  • Sample

    240101-d9xfmsdfe7

  • MD5

    a143e23435905aaee78cca98f920b419

  • SHA1

    32f33d44b67f41e438dbb81568f3cc0c566318b8

  • SHA256

    cdc42d582dcfc216e12fd59853ed4d26affbc1a5615d5a578872f674272dd80f

  • SHA512

    7182fd24418be9ade21027a9cefa167c2d58cb23ad5ea834244d156894d9e18abd4c6fd1e0e1e53834d406fa6e58ca2013f0aa3cd97a3cb0111069d55c5bd73b

  • SSDEEP

    98304:Q3mosrpRSHF9xN7hSYSmNNgl0+LP0d6UdDkXUymC5TBJvMwMgiCDhokKvk4dm8:csrpRoF9DXJNN6bL05ZkX9mC11Mhs9Kz

Score
7/10
discovery

Malware Config

Targets

    • Target

      SecuriteInfo.com.FileRepMalware.17033.29620.exe

    • Size

      4.7MB

    • MD5

      a143e23435905aaee78cca98f920b419

    • SHA1

      32f33d44b67f41e438dbb81568f3cc0c566318b8

    • SHA256

      cdc42d582dcfc216e12fd59853ed4d26affbc1a5615d5a578872f674272dd80f

    • SHA512

      7182fd24418be9ade21027a9cefa167c2d58cb23ad5ea834244d156894d9e18abd4c6fd1e0e1e53834d406fa6e58ca2013f0aa3cd97a3cb0111069d55c5bd73b

    • SSDEEP

      98304:Q3mosrpRSHF9xN7hSYSmNNgl0+LP0d6UdDkXUymC5TBJvMwMgiCDhokKvk4dm8:csrpRoF9DXJNN6bL05ZkX9mC11Mhs9Kz

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks