f71cbdfcf229589d9e9c9bbb8094945a55542a3004f7958f406dba91d91f23de

Analysis

max time kernel
145s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
13/02/2024, 08:29

Target

SecuriteInfo.com.Win32.TrojanX-gen.14802.10257.exe
Size

44KB
MD5

6756db4f700e1bcd559f966f9bb664bf
SHA1

66966591195f336323c4a299a61511927f894fd3
SHA256

f71cbdfcf229589d9e9c9bbb8094945a55542a3004f7958f406dba91d91f23de
SHA512

dab45b045faf762d3ef38299fd694794f2817a74893141a0da026db62f5f99dbc44c79d6b54f95cf11a9f4b794463ff8f86562040e1443bbad978b07ba1d60a4
SSDEEP

768:C1rs1ngRAESxkD1r63dtup9VsTM+PShHDlZjm5HcXCLA7+O:C1rs1ncAzxkDadasT9PShHjm5Hc+

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 5680 wrote to memory of 3180	5680	SecuriteInfo.com.Win32.TrojanX-gen.14802.10257.exe	84
PID 5680 wrote to memory of 3180	5680	SecuriteInfo.com.Win32.TrojanX-gen.14802.10257.exe	84
PID 5680 wrote to memory of 3180	5680	SecuriteInfo.com.Win32.TrojanX-gen.14802.10257.exe	84

C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.TrojanX-gen.14802.10257.exe
"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.TrojanX-gen.14802.10257.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5680
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c pause
  2⤵
  PID:3180