General
- Target uncategorized_2.0.9.248.vir
- Size 135KB
- Sample200719-6at96qsrjs
- SHA256 80e91c0ded60f7e85fbcba6239d2969c0910be5e0a5107a7f843ed2b30fb0ff9
- MD5 e508a8a88e063c26507ec095b57a1f4f
- SHA1 bdf10dece5ee332f0fda83a68225441a96036bba
- SHA512 84838c5020257ad497dada42be4bdf01dacbbb37c906da466ebcd7184d446b37b34600bff3e8c5946bab9f9decedea814d1ae80bd3da19dd25fd177f30ed838d
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
uncategorized_2.0.9.248.vir.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
uncategorized_2.0.9.248.vir.exe
Resource
win10
0 signatures
0 seconds
Malware Config
Targets
-
- Target uncategorized_2.0.9.248.vir
- Size 135KB
- SHA256 80e91c0ded60f7e85fbcba6239d2969c0910be5e0a5107a7f843ed2b30fb0ff9
- MD5 e508a8a88e063c26507ec095b57a1f4f
- SHA1 bdf10dece5ee332f0fda83a68225441a96036bba
- SHA512 84838c5020257ad497dada42be4bdf01dacbbb37c906da466ebcd7184d446b37b34600bff3e8c5946bab9f9decedea814d1ae80bd3da19dd25fd177f30ed838d
- MD5 SHA1 SHA512
Score8/10-
Executes dropped EXE
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext