Analysis
-
max time kernel
118s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
19-06-2024 01:19
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Program.Unwanted.5403.24272.26552.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Program.Unwanted.5403.24272.26552.exe
Resource
win10v2004-20240508-en
General
-
Target
SecuriteInfo.com.Program.Unwanted.5403.24272.26552.exe
-
Size
1.3MB
-
MD5
9462e2b4992e3ea63f3f04c499dc5a05
-
SHA1
9e57c55d9d51d6eabda71ffdfaf48709209943e2
-
SHA256
46cdc38806d00295bb3d6c87a2d06a3aefe648c8a1bb7e7aa54abe37019a96aa
-
SHA512
3f5d68ceeb34a24a91a2718e645564dbc2c6a75d018a517f9884f1a228140ee00f5108e00d43f3feeaf5f40cf391a44d81ec90fd63d445ecb1e3f2675dd3f13d
-
SSDEEP
24576:ih6SVFzDl6eZmL4v9IoYOlrQ14T1+G05hKwzlXX8l8whkwBY2/+WLHkO4H:K6UXtvDz85hK8XM8rcY/OI
Malware Config
Signatures
-
Processes:
SecuriteInfo.com.Program.Unwanted.5403.24272.26552.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main SecuriteInfo.com.Program.Unwanted.5403.24272.26552.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
SecuriteInfo.com.Program.Unwanted.5403.24272.26552.exepid process 2436 SecuriteInfo.com.Program.Unwanted.5403.24272.26552.exe -
Suspicious use of SetWindowsHookEx 5 IoCs
Processes:
SecuriteInfo.com.Program.Unwanted.5403.24272.26552.exepid process 2436 SecuriteInfo.com.Program.Unwanted.5403.24272.26552.exe 2436 SecuriteInfo.com.Program.Unwanted.5403.24272.26552.exe 2436 SecuriteInfo.com.Program.Unwanted.5403.24272.26552.exe 2436 SecuriteInfo.com.Program.Unwanted.5403.24272.26552.exe 2436 SecuriteInfo.com.Program.Unwanted.5403.24272.26552.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Program.Unwanted.5403.24272.26552.exe"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Program.Unwanted.5403.24272.26552.exe"1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Temp\{D8A98357-8B07-4DD0-984A-D67565837AB6}\resources.1.0.0.34sFilesize
1.6MB
MD51938c8aba656a7661565ceb7ea8b5b94
SHA1ab5e8279d90b240b58d35d13d27fb7e92bb77741
SHA256fba5162e6a34f8d0d53254ba0b348714956100035c1935c0294e190c75b0de2c
SHA512f17b83aaa10ec88ba851be7fa3670c2ab921770669e32934c791da5b0b70518c0c577fdea37247170e880bd171f011113e526121efbc46a559266e7eafe66ec8