Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

SecuriteIn...91.exe

windows7-x64

7

SecuriteIn...91.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    143s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/06/2024, 05:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    SecuriteInfo.com.Win64.SpywareX-gen.1297.32391.exe

  • Size

    6.9MB

  • MD5

    7a96de0c5f4d55fc51aab6b3eceb6644

  • SHA1

    032d36e9d5ec19eaab2a36d85d5650a1dfa97865

  • SHA256

    447832ebee40568a2f46d9fa452d5412d4f065149db1a2a8d1760023e51ac431

  • SHA512

    e22e236f35ee9623d1a63545ab9925efdc44e5ce3aea7ae5f59440f072d84d6922d05b79436df6a6acec53e34f62c9421d34bfecf9dc3988e977399970c777a2

  • SSDEEP

    196608:thFgtxwuLlA1HeT39IigJ1ncKOVVtk7cZtQrNP+P:wqr1+TtIi00VQa6M

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 4 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win64.SpywareX-gen.1297.32391.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win64.SpywareX-gen.1297.32391.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5020
    • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win64.SpywareX-gen.1297.32391.exe
      "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win64.SpywareX-gen.1297.32391.exe"
      2⤵
      • Loads dropped DLL
      PID:1724
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3488 --field-trial-handle=3088,i,14310325015283915034,7660943942870463106,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:1428

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\_MEI50202\VCRUNTIME140.dll
      Filesize

      116KB

      MD5

      be8dbe2dc77ebe7f88f910c61aec691a

      SHA1

      a19f08bb2b1c1de5bb61daf9f2304531321e0e40

      SHA256

      4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83

      SHA512

      0da644472b374f1da449a06623983d0477405b5229e386accadb154b43b8b083ee89f07c3f04d2c0c7501ead99ad95aecaa5873ff34c5eeb833285b598d5a655

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_MEI50202\_bz2.pyd
      Filesize

      83KB

      MD5

      5bebc32957922fe20e927d5c4637f100

      SHA1

      a94ea93ee3c3d154f4f90b5c2fe072cc273376b3

      SHA256

      3ed0e5058d370fb14aa5469d81f96c5685559c054917c7280dd4125f21d25f62

      SHA512

      afbe80a73ee9bd63d9ffa4628273019400a75f75454667440f43beb253091584bf9128cbb78ae7b659ce67a5faefdba726edb37987a4fe92f082d009d523d5d6

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_MEI50202\_decimal.pyd
      Filesize

      251KB

      MD5

      492c0c36d8ed1b6ca2117869a09214da

      SHA1

      b741cae3e2c9954e726890292fa35034509ef0f6

      SHA256

      b8221d1c9e2c892dd6227a6042d1e49200cd5cb82adbd998e4a77f4ee0e9abf1

      SHA512

      b8f1c64ad94db0252d96082e73a8632412d1d73fb8095541ee423df6f00bc417a2b42c76f15d7e014e27baae0ef50311c3f768b1560db005a522373f442e4be0

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_MEI50202\_hashlib.pyd
      Filesize

      64KB

      MD5

      da02cefd8151ecb83f697e3bd5280775

      SHA1

      1c5d0437eb7e87842fde55241a5f0ca7f0fc25e7

      SHA256

      fd77a5756a17ec0788989f73222b0e7334dd4494b8c8647b43fe554cf3cfb354

      SHA512

      a13bc5c481730f48808905f872d92cb8729cc52cfb4d5345153ce361e7d6586603a58b964a1ebfd77dd6222b074e5dcca176eaaefecc39f75496b1f8387a2283

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_MEI50202\_lzma.pyd
      Filesize

      156KB

      MD5

      195defe58a7549117e06a57029079702

      SHA1

      3795b02803ca37f399d8883d30c0aa38ad77b5f2

      SHA256

      7bf9ff61babebd90c499a8ed9b62141f947f90d87e0bbd41a12e99d20e06954a

      SHA512

      c47a9b1066dd9744c51ed80215bd9645aab6cc9d6a3f9df99f618e3dd784f6c7ce6f53eabe222cf134ee649250834193d5973e6e88f8a93151886537c62e2e2b

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_MEI50202\_socket.pyd
      Filesize

      81KB

      MD5

      dd8ff2a3946b8e77264e3f0011d27704

      SHA1

      a2d84cfc4d6410b80eea4b25e8efc08498f78990

      SHA256

      b102522c23dac2332511eb3502466caf842d6bcd092fbc276b7b55e9cc01b085

      SHA512

      958224a974a3449bcfb97faab70c0a5b594fa130adc0c83b4e15bdd7aab366b58d94a4a9016cb662329ea47558645acd0e0cc6df54f12a81ac13a6ec0c895cd8

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_MEI50202\base_library.zip
      Filesize

      1.3MB

      MD5

      43935f81d0c08e8ab1dfe88d65af86d8

      SHA1

      abb6eae98264ee4209b81996c956a010ecf9159b

      SHA256

      c611943f0aeb3292d049437cb03500cc2f8d12f23faf55e644bca82f43679bc0

      SHA512

      06a9dcd310aa538664b08f817ec1c6cfa3f748810d76559c46878ea90796804904d41ac79535c7f63114df34c0e5de6d0452bb30df54b77118d925f21cfa1955

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_MEI50202\libcrypto-3.dll
      Filesize

      5.0MB

      MD5

      e547cf6d296a88f5b1c352c116df7c0c

      SHA1

      cafa14e0367f7c13ad140fd556f10f320a039783

      SHA256

      05fe080eab7fc535c51e10c1bd76a2f3e6217f9c91a25034774588881c3f99de

      SHA512

      9f42edf04c7af350a00fa4fdf92b8e2e6f47ab9d2d41491985b20cd0adde4f694253399f6a88f4bdd765c4f49792f25fb01e84ec03fd5d0be8bb61773d77d74d

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_MEI50202\python312.dll
      Filesize

      6.6MB

      MD5

      d521654d889666a0bc753320f071ef60

      SHA1

      5fd9b90c5d0527e53c199f94bad540c1e0985db6

      SHA256

      21700f0bad5769a1b61ea408dc0a140ffd0a356a774c6eb0cc70e574b929d2e2

      SHA512

      7a726835423a36de80fb29ef65dfe7150bd1567cac6f3569e24d9fe091496c807556d0150456429a3d1a6fd2ed0b8ae3128ea3b8674c97f42ce7c897719d2cd3

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_MEI50202\select.pyd
      Filesize

      30KB

      MD5

      d0cc9fc9a0650ba00bd206720223493b

      SHA1

      295bc204e489572b74cc11801ed8590f808e1618

      SHA256

      411d6f538bdbaf60f1a1798fa8aa7ed3a4e8fcc99c9f9f10d21270d2f3742019

      SHA512

      d3ebcb91d1b8aa247d50c2c4b2ba1bf3102317c593cbf6c63883e8bf9d6e50c0a40f149654797abc5b4f17aee282ddd972a8cd9189bfcd5b9cec5ab9c341e20b

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\_MEI50202\unicodedata.pyd
      Filesize

      1.1MB

      MD5

      cc8142bedafdfaa50b26c6d07755c7a6

      SHA1

      0fcab5816eaf7b138f22c29c6d5b5f59551b39fe

      SHA256

      bc2cf23b7b7491edcf03103b78dbaf42afd84a60ea71e764af9a1ddd0fe84268

      SHA512

      c3b0c1dbe5bf159ab7706f314a75a856a08ebb889f53fe22ab3ec92b35b5e211edab3934df3da64ebea76f38eb9bfc9504db8d7546a36bc3cabe40c5599a9cbd

      Download Submit