f71cbdfcf229589d9e9c9bbb8094945a55542a3004f7958f406dba91d91f23de

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
13-02-2024 08:29

Target

SecuriteInfo.com.Win32.TrojanX-gen.14802.10257.exe
Size

44KB
MD5

6756db4f700e1bcd559f966f9bb664bf
SHA1

66966591195f336323c4a299a61511927f894fd3
SHA256

f71cbdfcf229589d9e9c9bbb8094945a55542a3004f7958f406dba91d91f23de
SHA512

dab45b045faf762d3ef38299fd694794f2817a74893141a0da026db62f5f99dbc44c79d6b54f95cf11a9f4b794463ff8f86562040e1443bbad978b07ba1d60a4
SSDEEP

768:C1rs1ngRAESxkD1r63dtup9VsTM+PShHDlZjm5HcXCLA7+O:C1rs1ncAzxkDadasT9PShHjm5Hc+

Score

1^/10

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2444 wrote to memory of 2000	2444	SecuriteInfo.com.Win32.TrojanX-gen.14802.10257.exe	29
PID 2444 wrote to memory of 2000	2444	SecuriteInfo.com.Win32.TrojanX-gen.14802.10257.exe	29
PID 2444 wrote to memory of 2000	2444	SecuriteInfo.com.Win32.TrojanX-gen.14802.10257.exe	29
PID 2444 wrote to memory of 2000	2444	SecuriteInfo.com.Win32.TrojanX-gen.14802.10257.exe	29

C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.TrojanX-gen.14802.10257.exe
"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.TrojanX-gen.14802.10257.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2444
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c pause
  2⤵
  PID:2000