Overview
overview
7Static
static
3VirusShare...0e.exe
windows7-x64
7VirusShare...0e.exe
windows10-2004-x64
7$PLUGINSDI...is.dll
windows7-x64
3$PLUGINSDI...is.dll
windows10-2004-x64
3ffMediaWat...ion.js
windows7-x64
1ffMediaWat...ion.js
windows10-2004-x64
1ff/chrome/...343.js
windows7-x64
1ff/chrome/...343.js
windows10-2004-x64
1ff/chrome/...ion.js
windows7-x64
1ff/chrome/...ion.js
windows10-2004-x64
1ie/MediaWa...43.dll
windows7-x64
6ie/MediaWa...43.dll
windows10-2004-x64
6uninstall.exe
windows7-x64
7uninstall.exe
windows10-2004-x64
7$PLUGINSDI...is.dll
windows7-x64
3$PLUGINSDI...is.dll
windows10-2004-x64
3General
-
Target
VirusShare_62fa50fcf35cfe4cc3d7db4370f4ac0e
-
Size
634KB
-
Sample
240204-s7mwrafdgk
-
MD5
62fa50fcf35cfe4cc3d7db4370f4ac0e
-
SHA1
501d7698d386bad31bc5d5ab3704ad1458f90d90
-
SHA256
1fc65e9d309534fa3d58be4239feda10c518e3a87d3a64ee71edf122a77b34b8
-
SHA512
5776ff4c98b38c3416def63df91f59930e774557f975b57b9d6794812bff1ff8bb3e8b4baa38679c4234711beb1fef0de1c2dbb6129bd0d1c2fe4f9e2bdebb05
-
SSDEEP
12288:Nj42G4GjeZHkwuPikQ7lKH5p5H9x13eZHkwuziDQBlKR5psxjlfe:NU2G4GjeZEXi37l6Br13eZEriMBlm0Nc
Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_62fa50fcf35cfe4cc3d7db4370f4ac0e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare_62fa50fcf35cfe4cc3d7db4370f4ac0e.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/aminsis.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/aminsis.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
ffMediaWatchV1home2343chaction.js
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
ffMediaWatchV1home2343chaction.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral7
Sample
ff/chrome/content/ffMediaWatchV1home2343.js
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
ff/chrome/content/ffMediaWatchV1home2343.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
ff/chrome/content/ffMediaWatchV1home2343ffaction.js
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
ff/chrome/content/ffMediaWatchV1home2343ffaction.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
ie/MediaWatchV1home2343.dll
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
ie/MediaWatchV1home2343.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
uninstall.exe
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
uninstall.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/aminsis.dll
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/aminsis.dll
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
VirusShare_62fa50fcf35cfe4cc3d7db4370f4ac0e
-
Size
634KB
-
MD5
62fa50fcf35cfe4cc3d7db4370f4ac0e
-
SHA1
501d7698d386bad31bc5d5ab3704ad1458f90d90
-
SHA256
1fc65e9d309534fa3d58be4239feda10c518e3a87d3a64ee71edf122a77b34b8
-
SHA512
5776ff4c98b38c3416def63df91f59930e774557f975b57b9d6794812bff1ff8bb3e8b4baa38679c4234711beb1fef0de1c2dbb6129bd0d1c2fe4f9e2bdebb05
-
SSDEEP
12288:Nj42G4GjeZHkwuPikQ7lKH5p5H9x13eZHkwuziDQBlKR5psxjlfe:NU2G4GjeZEXi37l6Br13eZEriMBlm0Nc
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
-
-
Target
$PLUGINSDIR/aminsis.dll
-
Size
559KB
-
MD5
51ba1095f0ae45a2d444bea506cb9ad4
-
SHA1
038a5d53d055a6d440bd2c8864c2f51db206c5e5
-
SHA256
b620091bf9973e807e12155d2247a6d233b5d13ec38c426675470ab4b26f0539
-
SHA512
f5fe2dd0f19bcaab47540ceedbec71f7f7c5b833c8772c097594c458e5f1101fe9feb849812b65c175055f71dfb13f11c4ad94fef42cd66f247413e453de3361
-
SSDEEP
12288:kbdmSvBuSrDWoN/8Z+iZz2ULoygI/htZw3EKwcxi0T8NGAmN:bSvBuSG7+iZz2ULoyXZzw3E2tT8UAmN
Score3/10 -
-
-
Target
ffMediaWatchV1home2343chaction.js
-
Size
834B
-
MD5
d07dcbfe226fcffd2f5bd7a0c8500e2b
-
SHA1
aeab62f021687e73aec911c4b749bd72e2064210
-
SHA256
6d3a29d68ad5566267da6506318723aeb8440043de37355c29cc27aaf3b6fed5
-
SHA512
8b1c23978bde065c81c36813ce160a4c56127cf839965b0769b11be8580673d278b5c45712fa83c7b0124535d80f14195060204e014f0da592d8d2a99244d9a6
Score1/10 -
-
-
Target
ff/chrome/content/ffMediaWatchV1home2343.js
-
Size
747B
-
MD5
aa409aef5e688d117f1b18cdfe457e89
-
SHA1
d367d6841e8e620a973ef2cee3e4cf3c49028dfe
-
SHA256
4f0eb85da8a593728fd3c1ecf1cd49bf52a1322f19381fbdff1998f98807945a
-
SHA512
f55cca31c59929b8bcec398f1a815e4fc77370b791d9c7a751abfdd4e9f653f1806bacbea3a0751bbfa6c6ea98a5ca1eef8dd9e623b04488d05b29a23077cea9
Score1/10 -
-
-
Target
ff/chrome/content/ffMediaWatchV1home2343ffaction.js
-
Size
678B
-
MD5
5f0b906c3a6a74bf024e01dd49e9745f
-
SHA1
a751eba836c1f4481626653ec6ec9e04f442c650
-
SHA256
7675efa49bcd0c294030014d92ed25828a37f38a8e4c136ba729bcc4dd01039e
-
SHA512
7fb48a22e30a75b6d8cf5f64bdb169018822de2719f17ee0bb632267e496b688b90819d51fc0faa0f458fe4ee67344df8866ad4201e4e1c92e37aea5e8a493f9
Score1/10 -
-
-
Target
ie/MediaWatchV1home2343.dll
-
Size
85KB
-
MD5
088cceaec28aeb78260de171791f0c1f
-
SHA1
a86b95c37ff00e8e8d6b5789977c1d8bb0b0a5a9
-
SHA256
3feed2e806f6c8f98e8b71b902b771571c46a394ccd63f32fb548d74bc100f66
-
SHA512
94d7b4464b944ce7f8f900227b33f00ee99ac57aa714f10880fd3e7a2c461d64c55de4f168e7c799e8bbe1b3569ca9a644db838e50cc2612aad994529ece7eba
-
SSDEEP
1536:SMflScQkG04RvxtakrOb8Dkxf3HgNglQGiI:tlikG0EbakrOv3A+aGiI
-
-
-
Target
uninstall.exe
-
Size
285KB
-
MD5
a37a37e4acaa65bcd9970daf55259a03
-
SHA1
4af6b6651caa28fa3888e52b4b047093fd6e1774
-
SHA256
802a46e3bce43a536e500bb2fc516bb956014cc9edf9441ab56e2fba4499c38e
-
SHA512
78f7ee17b7276e19ab6d70b1b8378cb249f2122ea09296f13d955a8106ede5c24458bca7b1619c04d70b0f0df07678c7989662cee71e6ef6ca04c4d4e888f2e1
-
SSDEEP
6144:Ee34+KpeZH+zpyuuz6GZkDOJ/7OafSH5KmrWym09x1L:H6eZHkwuPikQ7lKH5p5H9x1L
-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/aminsis.dll
-
Size
559KB
-
MD5
51ba1095f0ae45a2d444bea506cb9ad4
-
SHA1
038a5d53d055a6d440bd2c8864c2f51db206c5e5
-
SHA256
b620091bf9973e807e12155d2247a6d233b5d13ec38c426675470ab4b26f0539
-
SHA512
f5fe2dd0f19bcaab47540ceedbec71f7f7c5b833c8772c097594c458e5f1101fe9feb849812b65c175055f71dfb13f11c4ad94fef42cd66f247413e453de3361
-
SSDEEP
12288:kbdmSvBuSrDWoN/8Z+iZz2ULoygI/htZw3EKwcxi0T8NGAmN:bSvBuSG7+iZz2ULoyXZzw3E2tT8UAmN
Score3/10 -