Overview

overview

6

Static

static

3

SecuriteIn...63.exe

windows7-x64

6

SecuriteIn...63.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 01:27

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    SecuriteInfo.com.Win32.Evo-gen.9654.19263.exe

  • Size

    801KB

  • MD5

    a61cd931d3c181d6372bdadabd614be5

  • SHA1

    6fd65cff5653a3cb6138435120167a237cc1f3f1

  • SHA256

    afeb6fad8e7cd5dbc5bef0547038b4eb9f5249ff58d3cc81f630ad6b8ffd48ca

  • SHA512

    981c3ce84fa3dae4a9dbcd87a26b95d14f8b00a5480dfee09776029e7273cc9d9115dc046823f379c8579161e5024753b151d129b96d6d63c3dc1521b7d0527e

  • SSDEEP

    6144:LP2u7N1igtxQ6aBC3/tfd9BkChAsYnrcf+kPHgJcoXTMIUQzN6YkhbQtVEIQLq/e:b2uZ1J7LEC3/tF9uwWkPH8DMItXX+Fp

Score
6/10
persistence

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Drops file in System32 directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies Internet Explorer settings 1 TTPs 3 IoCs
    adwarespyware
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.Evo-gen.9654.19263.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.Evo-gen.9654.19263.exe"
    1⤵
    • Adds Run key to start application
    • Drops file in System32 directory
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    PID:2284

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads