Overview

overview

4

Static

static

1

SecuriteIn...22.exe

windows7-x64

4

SecuriteIn...22.exe

windows10-2004-x64

4

Analysis

  • max time kernel
    141s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    11-04-2024 10:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    SecuriteInfo.com.Program.Unwanted.3724.19547.29222.exe

  • Size

    6.2MB

  • MD5

    dc46c709b10bf7bcac28dd7e80a94091

  • SHA1

    7240476f0e1a1fdc1555e220bfe557d92078e2ce

  • SHA256

    02c87a31bee95e1cf1aa35b0064d7128cfdd2c685590742c20d5dfeec12252fe

  • SHA512

    f718a51654b07a2d8af649c4a95b55e93779c2ecec2521557622d7d7329970973a8d708e4beb6054aa89c7462e5a8d5be1e61fce3c9798830c6ecf3884cc2194

  • SSDEEP

    98304:VkL25WZ2OKYMCwTDEULxHwpNa17GGcnkxFvq3cIM0mHKf/oN:2256AYcTDdLJwpNMGtnkxFvqxGKXc

Score
4/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Program.Unwanted.3724.19547.29222.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Program.Unwanted.3724.19547.29222.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:1148
    • C:\Users\Admin\AppData\Local\Temp\is-6C7RJ.tmp\SecuriteInfo.com.Program.Unwanted.3724.19547.29222.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-6C7RJ.tmp\SecuriteInfo.com.Program.Unwanted.3724.19547.29222.tmp" /SL5="$400BE,5549910,808448,C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Program.Unwanted.3724.19547.29222.exe"
      2⤵
      • Executes dropped EXE
      • Suspicious behavior: GetForegroundWindowSpam
      PID:3032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\is-6C7RJ.tmp\SecuriteInfo.com.Program.Unwanted.3724.19547.29222.tmp
    Filesize

    3.0MB

    MD5

    10769b81758f0da3ae536dd80f68859b

    SHA1

    0a877c88a82e463b7c2f0b27441c4da638b744fe

    SHA256

    8163ed7f98f3d07ef9bd9bf25b530bde0c834b9645bdd394f57a3f74397bb6b4

    SHA512

    bfde093fa0297d9eb408db6b95ae2d453508a434ab569bf6354d86ee831e00a9a261ef1079705bfe3ec8d75819a77970f6a2f4dc34077373438c944f3cb5dd5f

    Download Submit
  • memory/1148-1-0x0000000000400000-0x00000000004D3000-memory.dmp
    Filesize

    844KB

    Download
  • memory/1148-10-0x0000000000400000-0x00000000004D3000-memory.dmp
    Filesize

    844KB

    Download
  • memory/3032-8-0x00000000001D0000-0x00000000001D1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/3032-11-0x0000000000400000-0x000000000070E000-memory.dmp
    Filesize

    3.1MB

    Download
  • memory/3032-14-0x00000000001D0000-0x00000000001D1000-memory.dmp
    Filesize

    4KB

    Download