Analysis
- max time kernel
149s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
07/04/2026, 04:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win64.MalwareX-gen.19538.15568.exe
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win64.MalwareX-gen.19538.15568.exe
Resource
win11-20260130-en
4 signatures
150 seconds
General
- Target SecuriteInfo.com.Win64.MalwareX-gen.19538.15568.exe
- Size 1.1MB
- Sample260407-e57aqagt7m
- SHA256 9029bab7100d209fa33c32f5450d0fc7a5661d4e481069aec127adc719f7308c
- MD5 2bf923fdf29f928430ff2fcd09b7553a
- SHA1 36864a2be19fd2048a2447be097fc53284092001
- SHA512 cadc90519ef4dd1f9b4d7bea00af2a711e062a0f7d557af240a2376b55aba4fb278e377f1d036ea7dd78e03e07af0ec94e41f08819805a25e52a2cdcbe58d358
- SSDEEP 24576:VYN8+v9KvWJJUUWSQUhddFj+3A0ljXwrgrNiey+Bjksyx:GPvaMSwHdl+3FjXFNEsyx
- TLSH T1FE45F0413A1FE992F8A80F701A65FA7487663EE9B410C2065EE4BEE77BF27553425303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- SmartAssembly .NET packer 1 IoCs
Detects SmartAssembly .NET packer.
resource yara_rule behavioral2/memory/3796-2-0x000001D31A190000-0x000001D31A1A6000-memory.dmp SmartAssembly - Suspicious use of SetThreadContext 1 IoCs
description pid Process procid_target PID 3796 set thread context of 4548 3796 SecuriteInfo.com.Win64.MalwareX-gen.19538.15568.exe 78 - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4548 SecuriteInfo.com.Win64.MalwareX-gen.19538.15568.exe 4548 SecuriteInfo.com.Win64.MalwareX-gen.19538.15568.exe - Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 3796 wrote to memory of 4548 3796 SecuriteInfo.com.Win64.MalwareX-gen.19538.15568.exe 78 PID 3796 wrote to memory of 4548 3796 SecuriteInfo.com.Win64.MalwareX-gen.19538.15568.exe 78 PID 3796 wrote to memory of 4548 3796 SecuriteInfo.com.Win64.MalwareX-gen.19538.15568.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win64.MalwareX-gen.19538.15568.exe"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win64.MalwareX-gen.19538.15568.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:3796 -
C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win64.MalwareX-gen.19538.15568.exeC:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win64.MalwareX-gen.19538.15568.exe2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4548
-