Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28-02-2024 17:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.MalwareX-gen.17353.8144.dll
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.MalwareX-gen.17353.8144.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
SecuriteInfo.com.Win32.MalwareX-gen.17353.8144.dll
-
Size
54KB
-
MD5
f58e0dfb8f915fa5ce1b7ca50c46b51b
-
SHA1
9acb977f13fce7ec38275887ddbbc0f42532e907
-
SHA256
90fa29cc98be1d715df26d22079bdb8ce1d1fd3ce6a4efb39a4c192134e01020
-
SHA512
4ebab09c4319c4604e7dad00f669e572ecf79d9db74a1a6f6ad833ea4be2ce3ead1548196a9b15a052ad006af28afa2005bd5523b8215e1f51fce9671a73580d
-
SSDEEP
768:rC8sPHjgxRIO5h7Ji10Ed4WKn84n2ZePq+RTdFvnM+cmVqDj64Bj:ri/Mf7oiEdXKn84n2ad/vbcmVWjXBj
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes:
rundll32.exedescription pid process target process PID 2240 wrote to memory of 2228 2240 rundll32.exe rundll32.exe PID 2240 wrote to memory of 2228 2240 rundll32.exe rundll32.exe PID 2240 wrote to memory of 2228 2240 rundll32.exe rundll32.exe PID 2240 wrote to memory of 2228 2240 rundll32.exe rundll32.exe PID 2240 wrote to memory of 2228 2240 rundll32.exe rundll32.exe PID 2240 wrote to memory of 2228 2240 rundll32.exe rundll32.exe PID 2240 wrote to memory of 2228 2240 rundll32.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.MalwareX-gen.17353.8144.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.MalwareX-gen.17353.8144.dll,#12⤵