Overview
overview
7Static
static
3VirusShare...e6.exe
windows7-x64
7VirusShare...e6.exe
windows10-2004-x64
7$PLUGINSDI...is.dll
windows7-x64
3$PLUGINSDI...is.dll
windows10-2004-x64
3ffMediaWat...ion.js
windows7-x64
1ffMediaWat...ion.js
windows10-2004-x64
1ff/chrome/...259.js
windows7-x64
1ff/chrome/...259.js
windows10-2004-x64
1ff/chrome/...ion.js
windows7-x64
1ff/chrome/...ion.js
windows10-2004-x64
1ie/MediaWa...59.dll
windows7-x64
6ie/MediaWa...59.dll
windows10-2004-x64
6uninstall.exe
windows7-x64
7uninstall.exe
windows10-2004-x64
7$PLUGINSDI...is.dll
windows7-x64
3$PLUGINSDI...is.dll
windows10-2004-x64
3General
-
Target
VirusShare_9a5f793d3581e19891f57e960a74b9e6
-
Size
634KB
-
Sample
240204-zv6awsage5
-
MD5
9a5f793d3581e19891f57e960a74b9e6
-
SHA1
f4d3d16e17269c9c4725613e1f7a9b993439cf6b
-
SHA256
8899b36d936c66cf3cc060bde22b4930529615ba064b227368c15bd8b7ba9b50
-
SHA512
c5c0707774e39c002d9c999b54d8ba829ffc6f6ba3e4c66fb7063d6c9f4767c24d4ef1bafcfd5c3c87986195d5fd0138f18897300851d42ba9ffe2236c697ef5
-
SSDEEP
12288:yFfEmMG4GjeZHkwuPikQ7lKH5p5H9x14veZHkwu7iDQ7lKR5pUxDlfy:yFfEzG4GjeZEXi37l6Br1weZETiM7lu3
Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_9a5f793d3581e19891f57e960a74b9e6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare_9a5f793d3581e19891f57e960a74b9e6.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/aminsis.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/aminsis.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
ffMediaWatchV1home259chaction.js
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
ffMediaWatchV1home259chaction.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral7
Sample
ff/chrome/content/ffMediaWatchV1home259.js
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
ff/chrome/content/ffMediaWatchV1home259.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
ff/chrome/content/ffMediaWatchV1home259ffaction.js
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
ff/chrome/content/ffMediaWatchV1home259ffaction.js
Resource
win10v2004-20231222-en
Behavioral task
behavioral11
Sample
ie/MediaWatchV1home259.dll
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
ie/MediaWatchV1home259.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
uninstall.exe
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
uninstall.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/aminsis.dll
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/aminsis.dll
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
VirusShare_9a5f793d3581e19891f57e960a74b9e6
-
Size
634KB
-
MD5
9a5f793d3581e19891f57e960a74b9e6
-
SHA1
f4d3d16e17269c9c4725613e1f7a9b993439cf6b
-
SHA256
8899b36d936c66cf3cc060bde22b4930529615ba064b227368c15bd8b7ba9b50
-
SHA512
c5c0707774e39c002d9c999b54d8ba829ffc6f6ba3e4c66fb7063d6c9f4767c24d4ef1bafcfd5c3c87986195d5fd0138f18897300851d42ba9ffe2236c697ef5
-
SSDEEP
12288:yFfEmMG4GjeZHkwuPikQ7lKH5p5H9x14veZHkwu7iDQ7lKR5pUxDlfy:yFfEzG4GjeZEXi37l6Br1weZETiM7lu3
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
-
-
Target
$PLUGINSDIR/aminsis.dll
-
Size
559KB
-
MD5
51ba1095f0ae45a2d444bea506cb9ad4
-
SHA1
038a5d53d055a6d440bd2c8864c2f51db206c5e5
-
SHA256
b620091bf9973e807e12155d2247a6d233b5d13ec38c426675470ab4b26f0539
-
SHA512
f5fe2dd0f19bcaab47540ceedbec71f7f7c5b833c8772c097594c458e5f1101fe9feb849812b65c175055f71dfb13f11c4ad94fef42cd66f247413e453de3361
-
SSDEEP
12288:kbdmSvBuSrDWoN/8Z+iZz2ULoygI/htZw3EKwcxi0T8NGAmN:bSvBuSG7+iZz2ULoyXZzw3E2tT8UAmN
Score3/10 -
-
-
Target
ffMediaWatchV1home259chaction.js
-
Size
829B
-
MD5
4f46d78ea2c4721dbb9eb4c4f09a198f
-
SHA1
42a759af85f6aa057fc2a4f9ce200dd78bb34e88
-
SHA256
80d6ceb4bc84d0bcdf25a2ce4083d70048d3cf984f32fd08e88424520320b928
-
SHA512
228cb2f9dd2a11063d5a0ac6009e59ae955bfb57d9a0895af576dd6084112e451be979fb0d440bcc479bd00a521509b766413272e98d1cb12909a864d2e535c1
Score1/10 -
-
-
Target
ff/chrome/content/ffMediaWatchV1home259.js
-
Size
744B
-
MD5
6559ec89d70ad3b221af24843cfe8fd4
-
SHA1
ec0a78dc95138723a26e922af193160ca939628d
-
SHA256
c2c271782ceecee8fcfc89d02aa4d72c298d97a889141dbfe9759c42c8b5021f
-
SHA512
ac37308660deb4403b4f75cf86043ce02b9f49a010efb3334351424ed2f819b8d3ee65da99acec7f392f442f700432288932aa0e2d108b7060152c7ddae8c18f
Score1/10 -
-
-
Target
ff/chrome/content/ffMediaWatchV1home259ffaction.js
-
Size
674B
-
MD5
152939cad5d926cfa4f43a16e6d55269
-
SHA1
d88b2ba18c8090180cd9fe9aa01f41aaff402b6a
-
SHA256
a729ee7d95d2aa61fc18665916294f8011fd2998c691a6bac27bb39893b37f12
-
SHA512
07ecfde6e601567803ec3dad98963f80016c76d6fcea3130b6969094ed5e6f0670f6b57800747ad024b9d896ff0205187a314fa2be7ee77f1ab0f9d0b1a04019
Score1/10 -
-
-
Target
ie/MediaWatchV1home259.dll
-
Size
85KB
-
MD5
927491284f62eb0947f604af31a5ea18
-
SHA1
ae992bb1075db6cd16b701740492d3747dee7049
-
SHA256
e7eec82a85190cf6827a22a7fb49c4121a33e1367f5c9c98c2337c8d538063aa
-
SHA512
13e25ca80223560fdce230b8204921bfcdda91da97c3647960ef0f1064e2f6de3376c0ceb8213046231be6351beccd4753d739cce5e51bd72beab1b6b9170895
-
SSDEEP
1536:5n/1CsEmkaMAXtahrOb8DktyXHA9glQQvt0d:Z12mkaMA9ahrOyXguaQvC
-
-
-
Target
uninstall.exe
-
Size
285KB
-
MD5
a5b1531961c36539d354806b64668187
-
SHA1
2730f432a589cff8c9a0298e54e596c6297664f9
-
SHA256
ef56e5b254f4b369a50c950c47c04b9c63f5204f2f8fc3651ee6e5eae5fd4e12
-
SHA512
3f7e8633cbf84ca3051a4eedb018bbe841e5bd4c636c9d30337fdf80a3c54e5969b020ce4c3326fde271aa71aa971c0f773cb166d537570d86e1fd00f0fc1761
-
SSDEEP
6144:Ee34RMJpeZH+zpyuuz6GZkDOJ/7OafSH5KmrWym09x18:0MveZHkwuPikQ7lKH5p5H9x18
-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/aminsis.dll
-
Size
559KB
-
MD5
51ba1095f0ae45a2d444bea506cb9ad4
-
SHA1
038a5d53d055a6d440bd2c8864c2f51db206c5e5
-
SHA256
b620091bf9973e807e12155d2247a6d233b5d13ec38c426675470ab4b26f0539
-
SHA512
f5fe2dd0f19bcaab47540ceedbec71f7f7c5b833c8772c097594c458e5f1101fe9feb849812b65c175055f71dfb13f11c4ad94fef42cd66f247413e453de3361
-
SSDEEP
12288:kbdmSvBuSrDWoN/8Z+iZz2ULoygI/htZw3EKwcxi0T8NGAmN:bSvBuSG7+iZz2ULoyXZzw3E2tT8UAmN
Score3/10 -