Analysis
-
max time kernel
142s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
28-01-2024 11:30
General
-
Target
SecuriteInfo.com.Program.Unwanted.4865.1778.13069.exe
-
Size
5.6MB
-
MD5
9aaaf7f4a87f5536e4a5aca99791640f
-
SHA1
d9f88e6cdaeb0f6c869458db6e94887c1cb393cc
-
SHA256
527abc7b2e136b4174cf0ced4bd85d4d4c01d40b8c4cc668660e6f1fecf5758c
-
SHA512
1b3ba6a40bdda1037b250ab2dc3f8e07cdd2143aeba0e1044c546cfea5450822d3d26eae3ee1dfbc57a827ea9037ca623f0b7b7adf7d6517d6c61faf37a89323
-
SSDEEP
98304:D1QTdmbDBnRi4wSZBfKH8V+B34Gkgw2kTF3KpRrHaac1MTpBgs9udeWA2FY:phbdn02Km+B34GkykB3O9aZ1KweWA2FY
Score
4/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Program.Unwanted.4865.1778.13069.exe"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Program.Unwanted.4865.1778.13069.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-T9JBH.tmp\SecuriteInfo.com.Program.Unwanted.4865.1778.13069.tmp"C:\Users\Admin\AppData\Local\Temp\is-T9JBH.tmp\SecuriteInfo.com.Program.Unwanted.4865.1778.13069.tmp" /SL5="$4010A,5062245,721408,C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Program.Unwanted.4865.1778.13069.exe"2⤵
- Executes dropped EXE
- Suspicious behavior: GetForegroundWindowSpam
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.4MB
MD584db4b4205f705da71471dc6ecc061f5
SHA1b90bac8c13a1553d58feef95a2c41c64118b29cf
SHA256647983ebde53e0501ff1af8ef6190dfeea5ccc64caf7dce808f1e3d98fb66a3c
SHA512c5803b63d33bb409433b496b83ca2a7359b4b1835815386206283b3af5c54d7d1cb9e80244a888638c7703c4bf54e1b2c11be6836f20b9fea157ab92bfbf365a
-
Filesize
4KB
-
Filesize
2.5MB
-
Filesize
4KB
-
Filesize
760KB
-
Filesize
760KB