Overview

overview

7

Static

static

1

VirusShare...a6.exe

windows7-x64

7

VirusShare...a6.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    VirusShare_50f77a64e5ec62c61c06c3d47352e0a6

  • Size

    328KB

  • Sample

    240204-s8fh3afeal

  • MD5

    50f77a64e5ec62c61c06c3d47352e0a6

  • SHA1

    0e4b3c6c0d2f0df6970b15d6f65026146f704921

  • SHA256

    8c18ffa11d19588df55c3d2938a3a0e37bedadc4e6c0ffe7a1d6264a370a8efb

  • SHA512

    945b861f1396b33b1c6eccd4602d238f308236934bb3afe07071d58cf8bf2c1d01dac5a7767ab1e1f22b33e8b1116b732eb49090185563a7357140ca3de15ca8

  • SSDEEP

    6144:+X3NlYQGajaevTlpRM2k1Pt+LCJ8kOp4x1mMwO9eGGxMbaCw3ovUcw:23XtRja8hE2kT+LBXpDMjefxOaCw3oVw

Score
7/10
persistence

Malware Config

Targets

    • Target

      VirusShare_50f77a64e5ec62c61c06c3d47352e0a6

    • Size

      328KB

    • MD5

      50f77a64e5ec62c61c06c3d47352e0a6

    • SHA1

      0e4b3c6c0d2f0df6970b15d6f65026146f704921

    • SHA256

      8c18ffa11d19588df55c3d2938a3a0e37bedadc4e6c0ffe7a1d6264a370a8efb

    • SHA512

      945b861f1396b33b1c6eccd4602d238f308236934bb3afe07071d58cf8bf2c1d01dac5a7767ab1e1f22b33e8b1116b732eb49090185563a7357140ca3de15ca8

    • SSDEEP

      6144:+X3NlYQGajaevTlpRM2k1Pt+LCJ8kOp4x1mMwO9eGGxMbaCw3ovUcw:23XtRja8hE2kT+LBXpDMjefxOaCw3oVw

    Score
    7/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks