895f3caac155d3075ce4097c4a82e912fea47e25d0bd4799129ebd82dd0baa5a

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
03/06/2024, 09:41

Target

SecuriteInfo.com.Trojan.Packed.19696.8410.5962.exe
Size

244KB
MD5

82d81ff08fb6997c31c4c26a080f19ec
SHA1

a73d9ceb14573cda238a05ee8f3688bbbc9d753c
SHA256

895f3caac155d3075ce4097c4a82e912fea47e25d0bd4799129ebd82dd0baa5a
SHA512

a886dd908ca65e89411933d91437f2a829d43471bba928dbbd90e14561a6c6b4a77116492de713307bac067c24aa5482d87f6ced1cb96b4e8ca290e2143c31b6
SSDEEP

3072:s7E7wyvbSMO+OWn8esK6ZfQw8DqRpmIV7HA8mDiqplBYwf5XTg9Q/EvallH/eLJt:sANvbSYOrLoqRoqEtlqfY0t/U

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2992	2884	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2884 wrote to memory of 2992	2884	SecuriteInfo.com.Trojan.Packed.19696.8410.5962.exe	28
PID 2884 wrote to memory of 2992	2884	SecuriteInfo.com.Trojan.Packed.19696.8410.5962.exe	28
PID 2884 wrote to memory of 2992	2884	SecuriteInfo.com.Trojan.Packed.19696.8410.5962.exe	28
PID 2884 wrote to memory of 2992	2884	SecuriteInfo.com.Trojan.Packed.19696.8410.5962.exe	28

C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.Packed.19696.8410.5962.exe
"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.Packed.19696.8410.5962.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2884
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2884 -s 36
  2⤵
  - Program crash
  PID:2992