Overview
overview
7Static
static
3VirusShare...8a.exe
windows7-x64
7VirusShare...8a.exe
windows10-2004-x64
7$PLUGINSDI...is.dll
windows7-x64
3$PLUGINSDI...is.dll
windows10-2004-x64
3ffMediaWat...ion.js
windows7-x64
1ffMediaWat...ion.js
windows10-2004-x64
1ff/chrome/...296.js
windows7-x64
1ff/chrome/...296.js
windows10-2004-x64
1ff/chrome/...ion.js
windows7-x64
1ff/chrome/...ion.js
windows10-2004-x64
1ie/MediaWa...96.dll
windows7-x64
6ie/MediaWa...96.dll
windows10-2004-x64
6uninstall.exe
windows7-x64
7uninstall.exe
windows10-2004-x64
7$PLUGINSDI...is.dll
windows7-x64
3$PLUGINSDI...is.dll
windows10-2004-x64
3General
-
Target
VirusShare_611003216d24016d7c0ff59389c9568a
-
Size
634KB
-
Sample
240204-zj56raada3
-
MD5
611003216d24016d7c0ff59389c9568a
-
SHA1
4430640d8eebf0167d64ef2c33956d563f80e97d
-
SHA256
290077aeed4487b4973459c5ed8b5322264b128d4438272b1aad746abb7bdc33
-
SHA512
8146fda36a8b2559c2dc495418d9e8ea0248d037615fac28ddd61f8fe6a05d3b65d958da26910f50864cd89e7f30551786cc78b01f0163edae507d3af430de78
-
SSDEEP
12288:vZDla7jG4GjeZHkwuPikQ7lKH5p5H9x1wkeZHkwutifQ/lK15ppxlAlfk:vOjG4GjeZEXi37l6Br1veZEFi4/lGBfh
Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_611003216d24016d7c0ff59389c9568a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare_611003216d24016d7c0ff59389c9568a.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/aminsis.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/aminsis.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
ffMediaWatchV1home296chaction.js
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
ffMediaWatchV1home296chaction.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
ff/chrome/content/ffMediaWatchV1home296.js
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
ff/chrome/content/ffMediaWatchV1home296.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
ff/chrome/content/ffMediaWatchV1home296ffaction.js
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
ff/chrome/content/ffMediaWatchV1home296ffaction.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
ie/MediaWatchV1home296.dll
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
ie/MediaWatchV1home296.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
uninstall.exe
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
uninstall.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/aminsis.dll
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/aminsis.dll
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
VirusShare_611003216d24016d7c0ff59389c9568a
-
Size
634KB
-
MD5
611003216d24016d7c0ff59389c9568a
-
SHA1
4430640d8eebf0167d64ef2c33956d563f80e97d
-
SHA256
290077aeed4487b4973459c5ed8b5322264b128d4438272b1aad746abb7bdc33
-
SHA512
8146fda36a8b2559c2dc495418d9e8ea0248d037615fac28ddd61f8fe6a05d3b65d958da26910f50864cd89e7f30551786cc78b01f0163edae507d3af430de78
-
SSDEEP
12288:vZDla7jG4GjeZHkwuPikQ7lKH5p5H9x1wkeZHkwutifQ/lK15ppxlAlfk:vOjG4GjeZEXi37l6Br1veZEFi4/lGBfh
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
-
-
Target
$PLUGINSDIR/aminsis.dll
-
Size
559KB
-
MD5
51ba1095f0ae45a2d444bea506cb9ad4
-
SHA1
038a5d53d055a6d440bd2c8864c2f51db206c5e5
-
SHA256
b620091bf9973e807e12155d2247a6d233b5d13ec38c426675470ab4b26f0539
-
SHA512
f5fe2dd0f19bcaab47540ceedbec71f7f7c5b833c8772c097594c458e5f1101fe9feb849812b65c175055f71dfb13f11c4ad94fef42cd66f247413e453de3361
-
SSDEEP
12288:kbdmSvBuSrDWoN/8Z+iZz2ULoygI/htZw3EKwcxi0T8NGAmN:bSvBuSG7+iZz2ULoyXZzw3E2tT8UAmN
Score3/10 -
-
-
Target
ffMediaWatchV1home296chaction.js
-
Size
829B
-
MD5
a79f5cfc1353044f3d0810e3e6264df6
-
SHA1
d261d0ddf317e4ddf77456704c176acad0de89b6
-
SHA256
7a9192eab737cb991a527d98b774c684b85105ac0a88a2335b70e2f0806bbb3d
-
SHA512
f97fd3ad94cf9b9f52349c9f92685a71fc9abaaa2f89cfa2760105063166510d13244cca13af03d4913cc263430d1c8f03350e3084315a179513692ce35fe181
Score1/10 -
-
-
Target
ff/chrome/content/ffMediaWatchV1home296.js
-
Size
744B
-
MD5
d90e13bf1d1ba51588c24787db74c7fd
-
SHA1
856ed3eb92f55569d1b0b78a483919ab748fc7af
-
SHA256
c003fbbc4e29969a6146fa0f03ed512cbfc787ff21b42e197a938628bde9774b
-
SHA512
4854d9e2d50ff455950284346d127546d9c8c03038b94c8e645be21bea848b480fab824b9e81c43f0745ba9fab110f6d03bf3f1b5c0725267b830a61d85c4a9f
Score1/10 -
-
-
Target
ff/chrome/content/ffMediaWatchV1home296ffaction.js
-
Size
674B
-
MD5
b8c3199a5fece153849029c223fc0ad1
-
SHA1
17be93bc74631430b8ac71e8d8c0874915da55f2
-
SHA256
b04b7b7ffd5463ea4983ea1c1c5f5315d8f5da9b29bfe8e6b00fdccf16bec597
-
SHA512
54fd8d97ff3cb7479e93d4b60bced14c01ea2475884a88be424a4879824cf8b892381803c610d16768eb4b6580d6532d84478db8aa396fd8c3ba0fd460054491
Score1/10 -
-
-
Target
ie/MediaWatchV1home296.dll
-
Size
85KB
-
MD5
a02a7a875ba0766d96144a33a34f2467
-
SHA1
072ed0a457914699dafbb87a6e701dd3601e5c1b
-
SHA256
106879ea7f653e32b5fd85bc27ddfebe691373a48f50811cdc595394cc4ce9a1
-
SHA512
8ef9e03ab1b643084d992bae89e6e56d96b91c83eece99eef3b4f52885d565da820828e3c17c3818d7491a9de260b3884a80b6872cbc244c86923e53cd24889c
-
SSDEEP
1536:L3flScQkGMAJtasrOb8Dk9DeHgNglQagkwl:rlikGMALasrO/eA+aagl
-
-
-
Target
uninstall.exe
-
Size
285KB
-
MD5
a41b699a2241aa4b1f6fb3582832f323
-
SHA1
75d93f45dac810a10e5685bda0bd38eb9d0b0f2a
-
SHA256
e83e42aa5c86814796249d7980e68281094ce85168dacfc3bc308adb1043d3b6
-
SHA512
c83ff3681017e51a10335dd2d6bef5ca4d61f270ac4c75cfbb8e3343a45b96bcab7e0b0bf80d241a0115b0aa55431a2f459caa6ec6e74d09869df4287ed56ef6
-
SSDEEP
6144:Ee34gpYpeZH+zpyuuz6GZkDOJ/7OafSH5KmrWym09x1H:1pkeZHkwuPikQ7lKH5p5H9x1H
-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/aminsis.dll
-
Size
559KB
-
MD5
51ba1095f0ae45a2d444bea506cb9ad4
-
SHA1
038a5d53d055a6d440bd2c8864c2f51db206c5e5
-
SHA256
b620091bf9973e807e12155d2247a6d233b5d13ec38c426675470ab4b26f0539
-
SHA512
f5fe2dd0f19bcaab47540ceedbec71f7f7c5b833c8772c097594c458e5f1101fe9feb849812b65c175055f71dfb13f11c4ad94fef42cd66f247413e453de3361
-
SSDEEP
12288:kbdmSvBuSrDWoN/8Z+iZz2ULoygI/htZw3EKwcxi0T8NGAmN:bSvBuSG7+iZz2ULoyXZzw3E2tT8UAmN
Score3/10 -