Overview

overview

10

Static

static

3

SecuriteIn...49.exe

windows7-x64

1

SecuriteIn...49.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    25/08/2024, 16:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    SecuriteInfo.com.Win64.RATX-gen.957.30649.exe

  • Size

    1.2MB

  • MD5

    5e7c5bff52e54cb9843c7324a574334b

  • SHA1

    6e4de10601761ae33cf4de1187b1aefde9fefa66

  • SHA256

    32768587423824856dcd6856228544da79f0a2283f822af41b63a92b5259c826

  • SHA512

    8b07b8470a8536ca0541672cb8bf5dc5ed7fa124cfc454868564b86474d07c17ef985fc731754e4d37cc5c81f8813f0d2b59223e7b3b6268c10ff2af8f39eaa2

  • SSDEEP

    24576:8QxNUoO1VTDz4ESGwyhaivv1zWqrX0y52eHM6QfVW+oonVadkcohXe4EC5Ic:8Q8oO1VXaGh7vJHXtM6g4+oQVadkdT5

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win64.RATX-gen.957.30649.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win64.RATX-gen.957.30649.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:3028
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -u -p 3028 -s 596
      2⤵
        PID:4704

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3028-0-0x000007FEF5C93000-0x000007FEF5C94000-memory.dmp

      Filesize

      4KB

      Download

    • memory/3028-1-0x0000000000B40000-0x0000000000C70000-memory.dmp

      Filesize

      1.2MB

      Download

    • memory/3028-2-0x000000001BBE0000-0x000000001BD0A000-memory.dmp

      Filesize

      1.2MB

      Download

    • memory/3028-3-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-4-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-6-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-10-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-12-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-9-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-16-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-22-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-20-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-18-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-14-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-24-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-26-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-32-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-58-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-66-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-64-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-62-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-60-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-56-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-54-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-52-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-50-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-48-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-46-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-44-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-42-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-40-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-38-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-36-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-34-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-30-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-28-0x000000001BBE0000-0x000000001BD03000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3028-1075-0x0000000000960000-0x0000000000A04000-memory.dmp

      Filesize

      656KB

      Download

    • memory/3028-1076-0x0000000000AA0000-0x0000000000AEC000-memory.dmp

      Filesize

      304KB

      Download

    • memory/3028-1078-0x000007FEF5C90000-0x000007FEF667C000-memory.dmp

      Filesize

      9.9MB

      Download

    • memory/3028-1077-0x000007FEF5C90000-0x000007FEF667C000-memory.dmp

      Filesize

      9.9MB

      Download

    • memory/3028-1079-0x000007FEF5C93000-0x000007FEF5C94000-memory.dmp

      Filesize

      4KB

      Download

    • memory/3028-1080-0x000007FEF5C90000-0x000007FEF667C000-memory.dmp

      Filesize

      9.9MB

      Download

    • memory/3028-1081-0x00000000006D0000-0x0000000000724000-memory.dmp

      Filesize

      336KB

      Download