General
-
Target
virussign.com_7035aa8d06897d9c55e11bed39037130
-
Size
120KB
-
Sample
220716-jtvj1aaba6
-
MD5
7035aa8d06897d9c55e11bed39037130
-
SHA1
4e02816b2a9ec4d758f34a8aeea20376eab320f8
-
SHA256
ded9acd7c3071f3477179b0729961d0975de0b81d98bf59b35da0ce75c48c584
-
SHA512
96589f63fc3afc92adf431907cbced4b8a120193ea12656307369a23394c7aa48bf409e5ed6a431abf268b7d2d8642911c4dc354951bc0f8b2752713854e5de5
Static task
static1
Behavioral task
behavioral1
Sample
virussign.dll
Resource
win7-20220414-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
virussign.com_7035aa8d06897d9c55e11bed39037130
-
Size
120KB
-
MD5
7035aa8d06897d9c55e11bed39037130
-
SHA1
4e02816b2a9ec4d758f34a8aeea20376eab320f8
-
SHA256
ded9acd7c3071f3477179b0729961d0975de0b81d98bf59b35da0ce75c48c584
-
SHA512
96589f63fc3afc92adf431907cbced4b8a120193ea12656307369a23394c7aa48bf409e5ed6a431abf268b7d2d8642911c4dc354951bc0f8b2752713854e5de5
-
Modifies firewall policy service
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-