Overview

overview

5

Static

static

1

SecuriteIn...62.exe

windows7-x64

4

SecuriteIn...62.exe

windows10-2004-x64

5

Analysis

  • max time kernel
    148s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 02:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    SecuriteInfo.com.Program.Unwanted.5065.12293.4062.exe

  • Size

    28.4MB

  • MD5

    19af89225259bf9ee269a74bbe85e6c2

  • SHA1

    f9455e4e7f68de76304567ee41d8dc4f1126a1f3

  • SHA256

    754eb8ab055095715c03f76840a42588e375b8f7b72d2c8bb7580456b26524b4

  • SHA512

    381424332a501c805661501a1e7f5e257be48cbe9a99d1a06bda5a73c7486b171983a03396248f2913104829c1b8abb28cd1dbb654163d7527dbcdded4f4596f

  • SSDEEP

    786432:ek67n39eN9LkC75Suthgp2tF+IUT8mCN0tqMYsiFJn4FV:g39eF7YurgQ/MJzFV

Score
4/10

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 4 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 14 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Program.Unwanted.5065.12293.4062.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Program.Unwanted.5065.12293.4062.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2748
    • C:\Users\Admin\AppData\Local\Temp\is-THCRE.tmp\SecuriteInfo.com.Program.Unwanted.5065.12293.4062.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-THCRE.tmp\SecuriteInfo.com.Program.Unwanted.5065.12293.4062.tmp" /SL5="$4001C,29020551,139264,C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Program.Unwanted.5065.12293.4062.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:2144
      • C:\Users\Admin\AppData\Local\Temp\is-DFENV.tmp-dbinst\setup.exe
        "C:\Users\Admin\AppData\Local\Temp\is-DFENV.tmp-dbinst\setup.exe" "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Program.Unwanted.5065.12293.4062.exe" /title="Driver Booster 11" /dbver=11.4.0.60 /eula="C:\Users\Admin\AppData\Local\Temp\is-DFENV.tmp-dbinst\EULA.rtf" /showlearnmore /pmtproduct /noemailpage /nochromepmt
        3⤵
        • Executes dropped EXE
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of FindShellTrayWindow
        PID:2620

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\ProgramData\IObit\iobitpromotion.ini
    Filesize

    2B

    MD5

    f3b25701fe362ec84616a93a45ce9998

    SHA1

    d62636d8caec13f04e28442a0a6fa1afeb024bbb

    SHA256

    b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

    SHA512

    98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

    Download Submit
  • C:\Users\Admin\AppData\Local\Temp\1716431300\ENGLISH.lng
    Filesize

    24KB

    MD5

    6265a3d8b6ea027b596c0c6e9afd5c38

    SHA1

    4502ff9bccfcbee6d6fc5d65e5381288f2d9f3a0

    SHA256

    193facd48ea0e183c7825c5efa2638c594cb73d9b40a1505a5ce14b478c6fb2e

    SHA512

    54b3492a3f4bfaf9f6b02b6d95710a5f7b0b8ef1078623ea77303f253bd0e1d44dad3e725afe0afa12a433b21b8d0cfea55c0214bf09213de7a3cebbf78fd8ad

    Download Submit
  • C:\Users\Admin\AppData\Local\Temp\appver-ac.ini
    Filesize

    848B

    MD5

    f416840345a7824380e817e81d93ab2d

    SHA1

    3848b6513e7721dc9e6de8471059be375feda5a1

    SHA256

    23931733560dec7d46169fa9ee8bf12229f01408a05a6fb884c46982dd10cb6b

    SHA512

    055a4a4ba43ba711fdb20cc8d99c3bce2b080577dd04dd9f4add3ccf18b1d2931ba9f7d155c6d498e366091204fe734a91966042928ed00bc26a31bd829909e4

    Download Submit
  • \Users\Admin\AppData\Local\Temp\is-DFENV.tmp-dbinst\setup.exe
    Filesize

    5.8MB

    MD5

    d47bdf9814e9682443fff06e7950b6ce

    SHA1

    c1ad32b2a4f7ecf123bb2487ff5370a8a52a4d7a

    SHA256

    02444937bdf1a642bee51b67231cb8de89b0107ace32fea4a0ccdb103f0d77cd

    SHA512

    d2118477319d0a8d08b84c6ad4cc7deeb733f80ed06284afaf657e5ff648f819f623cb9f5e2722df3dd3a414e1da04d6640f1c832317585c20e04400dc2f7bae

    Download Submit
  • \Users\Admin\AppData\Local\Temp\is-DFENV.tmp\DriverBooster.exe
    Filesize

    8.6MB

    MD5

    da0fb67f641b2b28ff86f42607c17e55

    SHA1

    7a274f4ee5d7a6545f7a5b783165c563d5037d95

    SHA256

    595e878f6f00f2b40435866acdac7c20584b897a729b5375b5e1d7cba3258fe2

    SHA512

    7e2f483916509983f4011e52dda34459ee375f425e072e3091233ee2483de04f351411aaa44533156b9ee6cc92f1f18947283464dfdec241cc59aba1899de714

    Download Submit
  • \Users\Admin\AppData\Local\Temp\is-THCRE.tmp\SecuriteInfo.com.Program.Unwanted.5065.12293.4062.tmp
    Filesize

    1.2MB

    MD5

    048f89f1be0ce17f10350b121c08b6bd

    SHA1

    d0746f79ab4c1c6712e787d30e7896cf02439d1a

    SHA256

    8dfc033ff5a1ebac9282f15f14ab048b73fb058fec927a1f5d188a359315c6eb

    SHA512

    f21b627324fb58f2a585c99df6309e11ae11f895e6f5b6f0d4f9b02368ec9982728e43a3aba5d346d3ca45419fc593293665305f067d9d9f41753d201a9ea90a

    Download Submit
  • memory/2144-8-0x0000000000400000-0x0000000000532000-memory.dmp
    Filesize

    1.2MB

    Download
  • memory/2144-52-0x0000000000400000-0x0000000000532000-memory.dmp
    Filesize

    1.2MB

    Download
  • memory/2620-156-0x0000000000400000-0x0000000000A1D000-memory.dmp
    Filesize

    6.1MB

    Download
  • memory/2748-2-0x0000000000401000-0x0000000000412000-memory.dmp
    Filesize

    68KB

    Download
  • memory/2748-0-0x0000000000400000-0x000000000042C000-memory.dmp
    Filesize

    176KB

    Download
  • memory/2748-54-0x0000000000400000-0x000000000042C000-memory.dmp
    Filesize

    176KB

    Download