21c1c5b62ceebdd74177318f5aa3818680e687012d3ca057f410825db313e2ef

Submit
Reports

Overview

overview

Static

static

Virussign....rn.exe

windows7-x64

Virussign....rn.exe

windows10-2004-x64

Virussign....rn.exe

windows7-x64

Virussign....rn.exe

windows10-2004-x64

Virussign....up.exe

windows7-x64

Virussign....up.exe

windows10-2004-x64

Virussign....8c.exe

windows7-x64

Virussign....8c.exe

windows10-2004-x64

Virussign....46.exe

windows7-x64

Virussign....46.exe

windows10-2004-x64

Virussign....30.dll

windows7-x64

Virussign....30.dll

windows10-2004-x64

Virussign....1e.exe

windows7-x64

Virussign....1e.exe

windows10-2004-x64

Virussign....61.exe

windows7-x64

Virussign....61.exe

windows10-2004-x64

Virussign....9b.exe

windows7-x64

Virussign....9b.exe

windows10-2004-x64

Virussign....6e.exe

windows7-x64

Virussign....6e.exe

windows10-2004-x64

Virussign....87.exe

windows7-x64

Virussign....87.exe

windows10-2004-x64

Virussign....95.exe

windows7-x64

Virussign....95.exe

windows10-2004-x64

Virussign....a8.dll

windows7-x64

Virussign....a8.dll

windows10-2004-x64

Virussign....a1.dll

windows7-x64

Virussign....a1.dll

windows10-2004-x64

Virussign....f8.exe

windows7-x64

Virussign....f8.exe

windows10-2004-x64

Virussign....8d.exe

windows7-x64

Virussign....8d.exe

windows10-2004-x64

Analysis

max time kernel
120s
max time network
132s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
21-05-2024 01:51

Sharing

Copy URL

Twitter E-mail

Static task

static1

8 signatures

Behavioral task

behavioral1

Sample

Virussign.2024.05.18/calc_avx_clear_pattern.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Virussign.2024.05.18/calc_avx_clear_pattern.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Virussign.2024.05.18/notepad_ovl_avx_clear_pattern.exe

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Virussign.2024.05.18/notepad_ovl_avx_clear_pattern.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Virussign.2024.05.18/setup.exe

Resource

win7-20240220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

Virussign.2024.05.18/setup.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

Virussign.2024.05.18/virussign.com_00ceb6c3a68f258ea4ccdc52d737df8c.exe

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Virussign.2024.05.18/virussign.com_00ceb6c3a68f258ea4ccdc52d737df8c.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Virussign.2024.05.18/virussign.com_04fb05c549d5a52ec70626fe4534fb46.exe

Resource

win7-20240419-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Virussign.2024.05.18/virussign.com_04fb05c549d5a52ec70626fe4534fb46.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Virussign.2024.05.18/virussign.com_0631206e87f9a6629676bd2c54c2c330.dll

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

Virussign.2024.05.18/virussign.com_0631206e87f9a6629676bd2c54c2c330.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

Virussign.2024.05.18/virussign.com_0644f7190db49dab20359cedf541f21e.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Virussign.2024.05.18/virussign.com_0644f7190db49dab20359cedf541f21e.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Virussign.2024.05.18/virussign.com_0670da5e605648d3612479c1b8c2b161.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Virussign.2024.05.18/virussign.com_0670da5e605648d3612479c1b8c2b161.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Virussign.2024.05.18/virussign.com_06d660813c67035f568796f6a305b69b.exe

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Virussign.2024.05.18/virussign.com_06d660813c67035f568796f6a305b69b.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Virussign.2024.05.18/virussign.com_07952ee09f86d961f8a8f90d84c8646e.exe

Resource

win7-20240215-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

Virussign.2024.05.18/virussign.com_07952ee09f86d961f8a8f90d84c8646e.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

Virussign.2024.05.18/virussign.com_07adf85d6149a7aa1fa528bfbbcf7187.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Virussign.2024.05.18/virussign.com_07adf85d6149a7aa1fa528bfbbcf7187.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Virussign.2024.05.18/virussign.com_08a6c34267000edb55071c7e51c17a95.exe

Resource

win7-20240221-en

bootkit persistence

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

Virussign.2024.05.18/virussign.com_08a6c34267000edb55071c7e51c17a95.exe

Resource

win10v2004-20240508-en

bootkit persistence

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

Virussign.2024.05.18/virussign.com_0a1b6be85247a893173f6358899f6ea8.dll

Resource

win7-20240220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

Virussign.2024.05.18/virussign.com_0a1b6be85247a893173f6358899f6ea8.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

Virussign.2024.05.18/virussign.com_0add1be69ec253397ac34e7cd6e235a1.dll

Resource

win7-20240220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

Virussign.2024.05.18/virussign.com_0add1be69ec253397ac34e7cd6e235a1.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

Virussign.2024.05.18/virussign.com_0ce34849ed68e6c96adc6b5b396c51f8.exe

Resource

win7-20231129-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

Virussign.2024.05.18/virussign.com_0ce34849ed68e6c96adc6b5b396c51f8.exe

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Virussign.2024.05.18/virussign.com_0d19b6b1baaa8f6ea8c83a39e74ffa8d.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

Virussign.2024.05.18/virussign.com_0d19b6b1baaa8f6ea8c83a39e74ffa8d.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

Virussign.2024.05.18/virussign.com_0a1b6be85247a893173f6358899f6ea8.dll
Size

88KB
MD5

0a1b6be85247a893173f6358899f6ea8
SHA1

c838c543430755d6964e96867ec4116b3dff0801
SHA256

b83b05b8b8ccaf282fd01b43c01c97856c52dd89791561fc0d17850e8b2c544d
SHA512

6f15241d39db43b935170019fa1485f7cf0c591aaaf23aefef7d856f5cf25d00403e16bcac446f0e5ea24fa2ab07dce4d7d8cff24cf6e43b28bc5c49ddddf91c
SSDEEP

1536:eRv592OxH4q1Xgwt12u2yai+v4mC0xyRYV14CLM/7SxP+:eRv5Jx51Xg9rij04KM/C+

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 7 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 2040 wrote to memory of 1292	2040	rundll32.exe	rundll32.exe
PID 2040 wrote to memory of 1292	2040	rundll32.exe	rundll32.exe
PID 2040 wrote to memory of 1292	2040	rundll32.exe	rundll32.exe
PID 2040 wrote to memory of 1292	2040	rundll32.exe	rundll32.exe
PID 2040 wrote to memory of 1292	2040	rundll32.exe	rundll32.exe
PID 2040 wrote to memory of 1292	2040	rundll32.exe	rundll32.exe
PID 2040 wrote to memory of 1292	2040	rundll32.exe	rundll32.exe

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Virussign.2024.05.18\virussign.com_0a1b6be85247a893173f6358899f6ea8.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2040
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\Virussign.2024.05.18\virussign.com_0a1b6be85247a893173f6358899f6ea8.dll,#1
  2⤵
  PID:1292

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads