Overview
overview
8Static
static
3Virus_Dest...rm1.js
windows7-x64
1Virus_Dest...rm1.js
windows10-2004-x64
1Virus_Dest...m1.vbs
windows7-x64
1Virus_Dest...m1.vbs
windows10-2004-x64
1Virus_Dest...er.vbs
windows7-x64
1Virus_Dest...er.vbs
windows10-2004-x64
1Virus_Dest...es.vbs
windows7-x64
1Virus_Dest...es.vbs
windows10-2004-x64
1Virus_Dest...ast.js
windows7-x64
1Virus_Dest...ast.js
windows10-2004-x64
1Virus_Dest...st.vbs
windows7-x64
1Virus_Dest...st.vbs
windows10-2004-x64
1Virus_Dest...oad.js
windows7-x64
1Virus_Dest...oad.js
windows10-2004-x64
1Virus_Dest...ad.vbs
windows7-x64
1Virus_Dest...ad.vbs
windows10-2004-x64
1Virus_Dest...und.js
windows7-x64
1Virus_Dest...und.js
windows10-2004-x64
1Virus_Dest...nd.vbs
windows7-x64
1Virus_Dest...nd.vbs
windows10-2004-x64
1Virus_Dest...ve.exe
windows7-x64
8Virus_Dest...ve.exe
windows10-2004-x64
8Virus_Dest...ve.exe
windows7-x64
8Virus_Dest...ve.exe
windows10-2004-x64
8Virus_Dest...ain.js
windows7-x64
1Virus_Dest...ain.js
windows10-2004-x64
1Virus_Dest...in.vbs
windows7-x64
1Virus_Dest...in.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Virus_Destructive/Virus_Destructive/Form1.js
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Virus_Destructive/Virus_Destructive/Form1.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
Virus_Destructive/Virus_Destructive/Form1.vbs
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
Virus_Destructive/Virus_Destructive/Form1.vbs
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
Virus_Destructive/Virus_Destructive/Properties/Resources.Designer.vbs
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
Virus_Destructive/Virus_Destructive/Properties/Resources.Designer.vbs
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
Virus_Destructive/Virus_Destructive/Properties/Resources.vbs
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
Virus_Destructive/Virus_Destructive/Properties/Resources.vbs
Resource
win10v2004-20230915-en
Behavioral task
behavioral9
Sample
Virus_Destructive/Virus_Destructive/Virus_last.js
Resource
win7-20230831-en
Behavioral task
behavioral10
Sample
Virus_Destructive/Virus_Destructive/Virus_last.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral11
Sample
Virus_Destructive/Virus_Destructive/Virus_last.vbs
Resource
win7-20230831-en
Behavioral task
behavioral12
Sample
Virus_Destructive/Virus_Destructive/Virus_last.vbs
Resource
win10v2004-20230915-en
Behavioral task
behavioral13
Sample
Virus_Destructive/Virus_Destructive/Virus_payload.js
Resource
win7-20230831-en
Behavioral task
behavioral14
Sample
Virus_Destructive/Virus_Destructive/Virus_payload.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral15
Sample
Virus_Destructive/Virus_Destructive/Virus_payload.vbs
Resource
win7-20230831-en
Behavioral task
behavioral16
Sample
Virus_Destructive/Virus_Destructive/Virus_payload.vbs
Resource
win10v2004-20230915-en
Behavioral task
behavioral17
Sample
Virus_Destructive/Virus_Destructive/Virus_sound.js
Resource
win7-20230831-en
Behavioral task
behavioral18
Sample
Virus_Destructive/Virus_Destructive/Virus_sound.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral19
Sample
Virus_Destructive/Virus_Destructive/Virus_sound.vbs
Resource
win7-20230831-en
Behavioral task
behavioral20
Sample
Virus_Destructive/Virus_Destructive/Virus_sound.vbs
Resource
win10v2004-20230915-en
Behavioral task
behavioral21
Sample
Virus_Destructive/Virus_Destructive/bin/Debug/Virus_Destructive.exe
Resource
win7-20230831-en
Behavioral task
behavioral22
Sample
Virus_Destructive/Virus_Destructive/bin/Debug/Virus_Destructive.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral23
Sample
Virus_Destructive/Virus_Destructive/obj/Debug/Virus_Destructive.exe
Resource
win7-20230831-en
Behavioral task
behavioral24
Sample
Virus_Destructive/Virus_Destructive/obj/Debug/Virus_Destructive.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral25
Sample
Virus_Destructive/Virus_Destructive/virus_last_again.js
Resource
win7-20230831-en
Behavioral task
behavioral26
Sample
Virus_Destructive/Virus_Destructive/virus_last_again.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral27
Sample
Virus_Destructive/Virus_Destructive/virus_last_again.vbs
Resource
win7-20230831-en
Behavioral task
behavioral28
Sample
Virus_Destructive/Virus_Destructive/virus_last_again.vbs
Resource
win10v2004-20230915-en
General
-
Target
Virus_Destructive_open_source.zip
-
Size
283KB
-
MD5
0592f326bdc30a76214b2a145f6ef04e
-
SHA1
3d7f82338a8ec90d3effb7d3f123c4e05a3b6178
-
SHA256
bc4e2e5e6b47482339f33f041636fc1b03f7ae31c7aaf575ebc3a090fdd51d32
-
SHA512
161646245dec8cb4f9a6195968eba8fb721c613b4ed6736ecfa6198e67fa894ac49247d026d814e19ecd5b9b03ef86a8d63b1b510b81b3329269434c1104b122
-
SSDEEP
6144:TqgYkgz2w8EOfqgYkgz2w8NK4O1c21TKQo:5Pg6MOVPg6lR2Mz
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Virus_Destructive/Virus_Destructive/bin/Debug/Virus_Destructive.exe unpack001/Virus_Destructive/Virus_Destructive/obj/Debug/Virus_Destructive.exe
Files
-
Virus_Destructive_open_source.zip.zip
-
Virus_Destructive/.vs/Virus_Destructive/v16/.suo
-
Virus_Destructive/Virus_Destructive.sln
-
Virus_Destructive/Virus_Destructive/Form1.Designer.cs
-
Virus_Destructive/Virus_Destructive/Form1.cs.js
-
Virus_Destructive/Virus_Destructive/Form1.resx.vbs
-
Virus_Destructive/Virus_Destructive/Program.cs
-
Virus_Destructive/Virus_Destructive/Properties/AssemblyInfo.cs
-
Virus_Destructive/Virus_Destructive/Properties/Resources.Designer.cs.vbs
-
Virus_Destructive/Virus_Destructive/Properties/Resources.resx.vbs
-
Virus_Destructive/Virus_Destructive/Properties/Settings.Designer.cs
-
Virus_Destructive/Virus_Destructive/Properties/Settings.settings
-
Virus_Destructive/Virus_Destructive/Virus_Destructive.csproj
-
Virus_Destructive/Virus_Destructive/Virus_last.Designer.cs
-
Virus_Destructive/Virus_Destructive/Virus_last.cs.js
-
Virus_Destructive/Virus_Destructive/Virus_last.resx.vbs
-
Virus_Destructive/Virus_Destructive/Virus_payload.Designer.cs
-
Virus_Destructive/Virus_Destructive/Virus_payload.cs.js
-
Virus_Destructive/Virus_Destructive/Virus_payload.resx.vbs
-
Virus_Destructive/Virus_Destructive/Virus_sound.Designer.cs
-
Virus_Destructive/Virus_Destructive/Virus_sound.cs.js
-
Virus_Destructive/Virus_Destructive/Virus_sound.resx.vbs
-
Virus_Destructive/Virus_Destructive/app.manifest
-
Virus_Destructive/Virus_Destructive/bin/Debug/Virus_Destructive.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Virus_Destructive/Virus_Destructive/bin/Debug/Virus_Destructive.pdb
-
Virus_Destructive/Virus_Destructive/obj/Debug/.NETFramework,Version=v4.0.AssemblyAttributes.cs
-
Virus_Destructive/Virus_Destructive/obj/Debug/DesignTimeResolveAssemblyReferences.cache
-
Virus_Destructive/Virus_Destructive/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
-
Virus_Destructive/Virus_Destructive/obj/Debug/Virus_Destructive.Properties.Resources.resources
-
Virus_Destructive/Virus_Destructive/obj/Debug/Virus_Destructive.Virus.resources
-
Virus_Destructive/Virus_Destructive/obj/Debug/Virus_Destructive.Virus_last.resources
-
Virus_Destructive/Virus_Destructive/obj/Debug/Virus_Destructive.Virus_payload.resources
-
Virus_Destructive/Virus_Destructive/obj/Debug/Virus_Destructive.Virus_sound.resources
-
Virus_Destructive/Virus_Destructive/obj/Debug/Virus_Destructive.csproj.CoreCompileInputs.cache
-
Virus_Destructive/Virus_Destructive/obj/Debug/Virus_Destructive.csproj.FileListAbsolute.txt
-
Virus_Destructive/Virus_Destructive/obj/Debug/Virus_Destructive.csproj.GenerateResource.cache
-
Virus_Destructive/Virus_Destructive/obj/Debug/Virus_Destructive.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Virus_Destructive/Virus_Destructive/obj/Debug/Virus_Destructive.pdb
-
Virus_Destructive/Virus_Destructive/obj/Debug/Virus_Destructive.virus_last_again.resources
-
Virus_Destructive/Virus_Destructive/red_skull_ico.ico
-
Virus_Destructive/Virus_Destructive/virus_last_again.Designer.cs
-
Virus_Destructive/Virus_Destructive/virus_last_again.cs.js
-
Virus_Destructive/Virus_Destructive/virus_last_again.resx.vbs