General
- Target uncategorized_3.1.0.8.vir
- Size 138KB
- Sample200719-q5vsbynwmj
- SHA256 d1c4be3772ebe6d26f06e3e38ae667c3236e1f13658e652eed0aa14dac5f45f0
- MD5 32d41459d463da10d92c1e14c487cc0c
- SHA1 d6fd3acae67cd9875d339fe649bf237a7e0ae316
- SHA512 23f9554aa4d75be4a909fc1c35798cffe2e22503e222815cf846399bf33fba16c4856953ebf28f9f7dfb688a67e1dd498114f4fa409dba5fad4891e5bcaf178e
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
uncategorized_3.1.0.8.vir.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
uncategorized_3.1.0.8.vir.exe
Resource
win10v200430
0 signatures
0 seconds
Malware Config
Targets
-
- Target uncategorized_3.1.0.8.vir
- Size 138KB
- SHA256 d1c4be3772ebe6d26f06e3e38ae667c3236e1f13658e652eed0aa14dac5f45f0
- MD5 32d41459d463da10d92c1e14c487cc0c
- SHA1 d6fd3acae67cd9875d339fe649bf237a7e0ae316
- SHA512 23f9554aa4d75be4a909fc1c35798cffe2e22503e222815cf846399bf33fba16c4856953ebf28f9f7dfb688a67e1dd498114f4fa409dba5fad4891e5bcaf178e
- MD5 SHA1 SHA512
Score8/10-
Executes dropped EXE
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext