a07cc5da63e027b909fb2cb71482141ba8a0fa055da5108891e5967f7b36f029

Analysis

max time kernel
119s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
23/02/2024, 02:29

Target

SecuriteInfo.com.Win32.Trojan.PSE.10S0A6W.21416.2571.exe
Size

1017KB
MD5

4aebae857e36db8928902bd704753005
SHA1

2fc9b36f55a9b91ee7bfd46d76fce96160247787
SHA256

a07cc5da63e027b909fb2cb71482141ba8a0fa055da5108891e5967f7b36f029
SHA512

d1622a22ca9f2d47d465ce0eaad96f73075ed55120548b51d4d075fb5e79b734f9dd02a6f028205626beae26b67a7715c0369c293a164ab4e3c91f0e1d58603b
SSDEEP

6144:v0jf5HNAyHGItxmcwhmyBLv/6hloY7Yf0cAPa+1RpJ3bS11iI2AMEeCZSSa+xj:sjf5tnIbhmyBDIIpZ+1Rf3bS1p2xEV

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2388	1808	WerFault.exe	19

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1808 wrote to memory of 2388	1808	SecuriteInfo.com.Win32.Trojan.PSE.10S0A6W.21416.2571.exe	28
PID 1808 wrote to memory of 2388	1808	SecuriteInfo.com.Win32.Trojan.PSE.10S0A6W.21416.2571.exe	28
PID 1808 wrote to memory of 2388	1808	SecuriteInfo.com.Win32.Trojan.PSE.10S0A6W.21416.2571.exe	28
PID 1808 wrote to memory of 2388	1808	SecuriteInfo.com.Win32.Trojan.PSE.10S0A6W.21416.2571.exe	28

C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.Trojan.PSE.10S0A6W.21416.2571.exe
"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.Trojan.PSE.10S0A6W.21416.2571.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1808
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1808 -s 36
  2⤵
  - Program crash
  PID:2388