Overview

overview

10

Static

static

10

VirusShare...36.exe

windows7-x64

10

VirusShare...36.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    VirusShare-0d596bd439c7177a88cbfee0f5737f36

  • Size

    11KB

  • Sample

    240203-p795hahgh5

  • MD5

    0d596bd439c7177a88cbfee0f5737f36

  • SHA1

    1f24f4eb0373ceab9b6c6441775c52fedd11ba71

  • SHA256

    41af1f9383924a7a9b6a26beaec8ea763b7e8c469c615345b18d8505225029c3

  • SHA512

    3841af851a19d78cce264c13875ea513280d33d5a5296133e0b907f10c87d6f3f0c38c6d53c702e270542ca9ec520bafc5d2e14a2e7674d3370d45a2b7ad677a

  • SSDEEP

    192:Ae1Kp9rfpH0qZaY0Ndf9Tz/xybNGKNPoBCx0N9EvEHTzJ1rsmIp:A0Kp9rhvZaY0NdBz/yNPPx0NEEHha

Score
10/10
collectiondiscoverypersistence

Malware Config

Targets

    • Target

      VirusShare-0d596bd439c7177a88cbfee0f5737f36

    • Size

      11KB

    • MD5

      0d596bd439c7177a88cbfee0f5737f36

    • SHA1

      1f24f4eb0373ceab9b6c6441775c52fedd11ba71

    • SHA256

      41af1f9383924a7a9b6a26beaec8ea763b7e8c469c615345b18d8505225029c3

    • SHA512

      3841af851a19d78cce264c13875ea513280d33d5a5296133e0b907f10c87d6f3f0c38c6d53c702e270542ca9ec520bafc5d2e14a2e7674d3370d45a2b7ad677a

    • SSDEEP

      192:Ae1Kp9rfpH0qZaY0Ndf9Tz/xybNGKNPoBCx0N9EvEHTzJ1rsmIp:A0Kp9rhvZaY0NdBz/yNPPx0NEEHha

    Score
    10/10
    collectiondiscoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Detects executables packed with MEW

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Accesses Microsoft Outlook profiles

      collection

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks