Overview

overview

8

Static

static

8

Forever

windows7_x64

6

Resubmissions

17-02-2021 09:58

210217-d4zheg9dda 8

17-02-2021 09:45

210217-vjr5e39tmj 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    msversion.dll

  • Size

    3.2MB

  • Sample

    210217-d4zheg9dda

  • MD5

    e23246d5a16fd344dfd2fc7177d43890

  • SHA1

    9d0ee3d8896911c2743ff89c72c30639f0851f52

  • SHA256

    f4f02f78b8d89ed5063773985d4ad7b4c9205417b34787fb945f739134a85a8b

  • SHA512

    01d4b4c0c60272759906f3c2d255a0378c9b4c081878866c9beef187a8c58b53d7da50109541f2da3051035e72b7a60b54710d6e3cddd01a28eb1009bc6af1ed

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      msversion.dll

    • Size

      3.2MB

    • MD5

      e23246d5a16fd344dfd2fc7177d43890

    • SHA1

      9d0ee3d8896911c2743ff89c72c30639f0851f52

    • SHA256

      f4f02f78b8d89ed5063773985d4ad7b4c9205417b34787fb945f739134a85a8b

    • SHA512

      01d4b4c0c60272759906f3c2d255a0378c9b4c081878866c9beef187a8c58b53d7da50109541f2da3051035e72b7a60b54710d6e3cddd01a28eb1009bc6af1ed

    Score
    6/10

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks