Overview

overview

10

Static

static

10

Virussign....rn.exe

windows7-x64

1

Virussign....rn.exe

windows10-2004-x64

1

Virussign....rn.exe

windows7-x64

1

Virussign....rn.exe

windows10-2004-x64

1

Virussign....up.exe

windows7-x64

1

Virussign....up.exe

windows10-2004-x64

1

Virussign....8c.exe

windows7-x64

Virussign....8c.exe

windows10-2004-x64

Virussign....46.exe

windows7-x64

1

Virussign....46.exe

windows10-2004-x64

1

Virussign....30.dll

windows7-x64

3

Virussign....30.dll

windows10-2004-x64

3

Virussign....1e.exe

windows7-x64

Virussign....1e.exe

windows10-2004-x64

Virussign....61.exe

windows7-x64

Virussign....61.exe

windows10-2004-x64

Virussign....9b.exe

windows7-x64

Virussign....9b.exe

windows10-2004-x64

Virussign....6e.exe

windows7-x64

1

Virussign....6e.exe

windows10-2004-x64

1

Virussign....87.exe

windows7-x64

1

Virussign....87.exe

windows10-2004-x64

1

Virussign....95.exe

windows7-x64

7

Virussign....95.exe

windows10-2004-x64

7

Virussign....a8.dll

windows7-x64

1

Virussign....a8.dll

windows10-2004-x64

1

Virussign....a1.dll

windows7-x64

1

Virussign....a1.dll

windows10-2004-x64

1

Virussign....f8.exe

windows7-x64

1

Virussign....f8.exe

windows10-2004-x64

1

Virussign....8d.exe

windows7-x64

Virussign....8d.exe

windows10-2004-x64

Analysis

  • max time kernel
    117s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    21-05-2024 01:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Virussign.2024.05.18/virussign.com_0ce34849ed68e6c96adc6b5b396c51f8.exe

  • Size

    1.7MB

  • MD5

    0ce34849ed68e6c96adc6b5b396c51f8

  • SHA1

    13cec5096e74a97f05f603dcbb15373d279e857f

  • SHA256

    143c775f3192ac837028e02e71125c8f3c216ac7c1e7fa03b65d8be26d5717b7

  • SHA512

    e545ff7dcfb8bc6070af6b1c168c6544e44205618b8d7621a25ad9fd17444e3b9d48711f3a3ea3aeeb18fb0b8a9ad812525af965b76ad79705d8e4c9e5194d54

  • SSDEEP

    49152:Qchq5LrtH8GUz3x07wb5qKGjs9+UyAAXcADHyLash66cC918KxKz3x07wb5qKGjn:Qf53WGYyM

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Virussign.2024.05.18\virussign.com_0ce34849ed68e6c96adc6b5b396c51f8.exe
    "C:\Users\Admin\AppData\Local\Temp\Virussign.2024.05.18\virussign.com_0ce34849ed68e6c96adc6b5b396c51f8.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:320

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/320-0-0x0000000000220000-0x0000000000221000-memory.dmp

    Filesize

    4KB

    Download

  • memory/320-2-0x0000000000400000-0x00000000005B5000-memory.dmp

    Filesize

    1.7MB

    Download