021d6a4237d0ed05adcc40e8ce1d74f8897f497e4f280678b06ae9d7f07fae8a | Triage™

Login
Reports

Overview

overview

Static

static

3

virussign....92.exe

windows7-x64

virussign....92.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
virussign.com_999d7e255f9ed7490988cdc221a88892.vir
Size 70KB
Sample240303-lxr96agg7w
SHA256 021d6a4237d0ed05adcc40e8ce1d74f8897f497e4f280678b06ae9d7f07fae8a
MD5 999d7e255f9ed7490988cdc221a88892
SHA1 da3ee964aefa2b066fa4e66c7c8501f05d02c07a
SHA512 8872ef709d8933ec3e5ebf7e255ee1c3e16c80295e9f2939429787fb03774bf1454e85221898b5100dad5f5e23780392b07521e26aff7c9b7de76091a3a0352a
SSDEEP 1536:xQ3YrzjzGabh9X0PCig8Hf7j6iQ3e7Ori:qizj7bhtMC98/7pIe71
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

evasion persistence trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

virussign.com_999d7e255f9ed7490988cdc221a88892.exe

Resource

win7-20240221-en

windows7-x64

11 signatures

150 seconds

evasion persistence trojan

Behavioral task

behavioral2

Sample

virussign.com_999d7e255f9ed7490988cdc221a88892.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

10 signatures

150 seconds

evasion persistence trojan

Malware Config

Targets

- Target
  virussign.com_999d7e255f9ed7490988cdc221a88892.vir
- Size 70KB
- SHA256 021d6a4237d0ed05adcc40e8ce1d74f8897f497e4f280678b06ae9d7f07fae8a
- MD5 999d7e255f9ed7490988cdc221a88892
- SHA1 da3ee964aefa2b066fa4e66c7c8501f05d02c07a
- SHA512 8872ef709d8933ec3e5ebf7e255ee1c3e16c80295e9f2939429787fb03774bf1454e85221898b5100dad5f5e23780392b07521e26aff7c9b7de76091a3a0352a
- SSDEEP 1536:xQ3YrzjzGabh9X0PCig8Hf7j6iQ3e7Ori:qizj7bhtMC98/7pIe71
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan

© 2018-2026

Terms | Privacy