58e13e37e2d8484bda8ba700999ad4e78b88ef3f0dd980747e30533849a17135

Analysis

max time kernel
119s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
16/04/2024, 03:23

Target

SecuriteInfo.com.Trojan.GenericKD.72333858.1744.exe
Size

146KB
MD5

32fa14b08b44ca01e329bc63d5e2c304
SHA1

94104fe46c238faf3d5ba021f83cf9dde3415151
SHA256

58e13e37e2d8484bda8ba700999ad4e78b88ef3f0dd980747e30533849a17135
SHA512

2bf675cc1bd141af67f91430ab49d10bfa3f0a14442faa51c7ea048d10bb2208837da8889a835d05cad57734a6948432910a260b36873856d54fa0bdddfa7596
SSDEEP

3072:qyqC5LCMUYZsFmdFfVbhZejvcGJN6VOvnz3dbEnt6zA:qfVMFZ1fMYc

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2228 wrote to memory of 1856	2228	SecuriteInfo.com.Trojan.GenericKD.72333858.1744.exe	29
PID 2228 wrote to memory of 1856	2228	SecuriteInfo.com.Trojan.GenericKD.72333858.1744.exe	29
PID 2228 wrote to memory of 1856	2228	SecuriteInfo.com.Trojan.GenericKD.72333858.1744.exe	29

C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.GenericKD.72333858.1744.exe
"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.GenericKD.72333858.1744.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2228
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2228 -s 516
  2⤵
  PID:1856

memory/2228-0-0x0000000000D70000-0x0000000000D9A000-memory.dmp

Filesize
168KB

Download
memory/2228-1-0x000007FEF5600000-0x000007FEF5FEC000-memory.dmp

Filesize
9.9MB

Download
memory/2228-2-0x000007FEF5600000-0x000007FEF5FEC000-memory.dmp

Filesize
9.9MB

Download