General
- Target gameover_0.0.0.17.vir
- Size 8.1MB
- Sample200719-yhnte975as
- SHA256 d935c6883744416102e2be4498623103a150fdbcb0a702240455f5d40f330bf4
- MD5 51bf97aeb468d40eb9dfd85d4c0eb7d0
- SHA1 bd548690fc110d2e3a6f76118b1a2bb15008b515
- SHA512 18d4a960770e67da9bfb131b43869e582ad618254f6eb6f1851202ef4a7bc973bbec886153427b88b9c32354c1976b1253e3201c3c3d5d7ef223e4b5177071ce
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
gameover_0.0.0.17.vir.exe
Resource
win7v200430
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
gameover_0.0.0.17.vir.exe
Resource
win10
0 signatures
0 seconds
Malware Config
Targets
-
- Target gameover_0.0.0.17.vir
- Size 8.1MB
- SHA256 d935c6883744416102e2be4498623103a150fdbcb0a702240455f5d40f330bf4
- MD5 51bf97aeb468d40eb9dfd85d4c0eb7d0
- SHA1 bd548690fc110d2e3a6f76118b1a2bb15008b515
- SHA512 18d4a960770e67da9bfb131b43869e582ad618254f6eb6f1851202ef4a7bc973bbec886153427b88b9c32354c1976b1253e3201c3c3d5d7ef223e4b5177071ce
- MD5 SHA1 SHA512
Score8/10-
Executes dropped EXE
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext