Overview

overview

10

Static

static

3

virussign....90.exe

windows7-x64

10

virussign....90.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    virussign.com_f7448b968f3ea7f26bd47f9ff65fe390.vir

  • Size

    206KB

  • Sample

    240602-mj4lpsbb79

  • MD5

    f7448b968f3ea7f26bd47f9ff65fe390

  • SHA1

    905d7cee9e4ff92ac0576e41fcb158cf2693ba2c

  • SHA256

    307dacaeecef25f4234e4a089b0b6e4107881476a8c792c554ac67ea3985f2b5

  • SHA512

    723537c43da7c65b20282929bcc09dc06bf51f22dbc2a7d10edd7a856d536d264682e812e9ca612d7a121ab16fb320ff0138f255c1fcb0cb8142f47773188b92

  • SSDEEP

    3072:5vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unLQ:5vEN2U+T6i5LirrllHy4HUcMQY6KQ

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      virussign.com_f7448b968f3ea7f26bd47f9ff65fe390.vir

    • Size

      206KB

    • MD5

      f7448b968f3ea7f26bd47f9ff65fe390

    • SHA1

      905d7cee9e4ff92ac0576e41fcb158cf2693ba2c

    • SHA256

      307dacaeecef25f4234e4a089b0b6e4107881476a8c792c554ac67ea3985f2b5

    • SHA512

      723537c43da7c65b20282929bcc09dc06bf51f22dbc2a7d10edd7a856d536d264682e812e9ca612d7a121ab16fb320ff0138f255c1fcb0cb8142f47773188b92

    • SSDEEP

      3072:5vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unLQ:5vEN2U+T6i5LirrllHy4HUcMQY6KQ

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks