Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
12/07/2024, 17:26
General
-
Target
SecuriteInfo.com.Trojan.PackedNET.2968.12552.16499.exe
-
Size
7.0MB
-
MD5
60fa7bfb474957e975a77df41e4f2a64
-
SHA1
d64554a572210a509027d5b923b822159b5d2903
-
SHA256
43f642d51a1e2e2a5dbeb9791b621e7617d4509c9fe0a44197aebb37ba10be24
-
SHA512
ed1e33c7a082012f1ef9e1e43bef3e0e22f7550dd983c7201046e1a1b60d7ba679cae8cad0ece9083a7256c1021fe8043cb1872ec2771294b19aa794f78039d2
-
SSDEEP
98304:etlBC3ygOGRBuvCO89yILGGIVk1aLg4mLJgO/zuEPo9I+FQO4if5:i+R3O89yIL/IGILg4ogO/zuRxTf5
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 10 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.PackedNET.2968.12552.16499.exe"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.PackedNET.2968.12552.16499.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe"2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.9MB
-
Filesize
7.0MB
-
Filesize
272KB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB
-
Filesize
104KB
-
Filesize
24KB
-
Filesize
4KB
-
Filesize
356KB
-
Filesize
356KB
-
Filesize
356KB
-
Filesize
356KB
-
Filesize
356KB
-
Filesize
356KB
-
Filesize
356KB
-
Filesize
244KB
-
Filesize
4KB