0cd53b38aff244f57afc12e7393b543d82e7eed2eecfc2fcdb034fcd1f3bd2ee

Analysis

max time kernel
144s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
18-01-2024 10:37

Target

SecuriteInfo.com.Program.Unwanted.5320.24334.27455.exe
Size

7.5MB
MD5

f004da3d2f9f3ff3437089759bae8cfd
SHA1

f0106d7e51cca3cfe35c4c6d6d53e9bdaddc7ad7
SHA256

0cd53b38aff244f57afc12e7393b543d82e7eed2eecfc2fcdb034fcd1f3bd2ee
SHA512

b09d5cbca0252acb6b3414ad60956686731bd3b5e57c20bd993593f06a7611daab8c68c35218881fffb25d0f5546a3b3326ce1f532c85bf6965ad6c4b86bb7f8
SSDEEP

196608:WW3n0Nma5Jn2JxKSxpYseYy7/fFs49fyJmJuSpp:p30h32JxKSxpYagq4kmJuSpp

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2956	SecuriteInfo.com.Program.Unwanted.5320.24334.27455.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2368 wrote to memory of 2956	2368	SecuriteInfo.com.Program.Unwanted.5320.24334.27455.exe	88
PID 2368 wrote to memory of 2956	2368	SecuriteInfo.com.Program.Unwanted.5320.24334.27455.exe	88
PID 2368 wrote to memory of 2956	2368	SecuriteInfo.com.Program.Unwanted.5320.24334.27455.exe	88

C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Program.Unwanted.5320.24334.27455.exe
"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Program.Unwanted.5320.24334.27455.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2368
- C:\Users\Admin\AppData\Local\Temp\is-FIIV5.tmp\SecuriteInfo.com.Program.Unwanted.5320.24334.27455.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-FIIV5.tmp\SecuriteInfo.com.Program.Unwanted.5320.24334.27455.tmp" /SL5="$60090,6942773,831488,C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Program.Unwanted.5320.24334.27455.exe"
  2⤵
  - Executes dropped EXE
  PID:2956

C:\Users\Admin\AppData\Local\Temp\is-FIIV5.tmp\SecuriteInfo.com.Program.Unwanted.5320.24334.27455.tmp

Filesize
3.1MB

MD5
e1efffeabf739101e96d3a2cfece74c0

SHA1
e541f100b3bf528e8624c0ba1ef4c57a312bab57

SHA256
14096802b6957f548379c56ff9a48b39b988c03355132353230295b68c38e163

SHA512
43586ac27db6e202025a5caeb7dbb67ce0695def75a57ecc262fca1bf25647d5916cac3e42aa8104d2eb981520ab74beb94ec199f74e5b3f203e66691c506ae0

Download Submit
memory/2368-0-0x0000000000400000-0x00000000004D8000-memory.dmp

Filesize
864KB

Download
memory/2368-9-0x0000000000400000-0x00000000004D8000-memory.dmp

Filesize
864KB

Download
memory/2956-5-0x00000000026D0000-0x00000000026D1000-memory.dmp

Filesize
4KB

Download
memory/2956-10-0x0000000000400000-0x000000000071A000-memory.dmp

Filesize
3.1MB

Download
memory/2956-13-0x00000000026D0000-0x00000000026D1000-memory.dmp

Filesize
4KB

Download