Overview

overview

9

Static

static

3

virussign....f0.exe

windows7-x64

9

virussign....f0.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    virussign.com_4c828d85dee6ba222011354ff161aef0.vir

  • Size

    167KB

  • Sample

    240602-xsl35abf7v

  • MD5

    4c828d85dee6ba222011354ff161aef0

  • SHA1

    e941cb5cfed8acaa0f8a773d284ad1be721d15f8

  • SHA256

    b3707834de2ce8880c837af340715f71236287dee3342a2237ad7dc1461147ff

  • SHA512

    96a7b7e681046b311efdf47e55f3db9aa88b788d869e40eda32197a3cc1a3c2b11f435fd65c83f13f0a60c5c47600b0719f1e7cfdc626fded4b92f79442aa11f

  • SSDEEP

    768:W7BlpppARFbhmvjC9vjCm7BlpppARFbhmvjC9vjCYw2Yw2B:W7ZppApmvgvX7ZppApmvgvg

Score
9/10
ransomware

Malware Config

Targets

    • Target

      virussign.com_4c828d85dee6ba222011354ff161aef0.vir

    • Size

      167KB

    • MD5

      4c828d85dee6ba222011354ff161aef0

    • SHA1

      e941cb5cfed8acaa0f8a773d284ad1be721d15f8

    • SHA256

      b3707834de2ce8880c837af340715f71236287dee3342a2237ad7dc1461147ff

    • SHA512

      96a7b7e681046b311efdf47e55f3db9aa88b788d869e40eda32197a3cc1a3c2b11f435fd65c83f13f0a60c5c47600b0719f1e7cfdc626fded4b92f79442aa11f

    • SSDEEP

      768:W7BlpppARFbhmvjC9vjCm7BlpppARFbhmvjC9vjCYw2Yw2B:W7ZppApmvgvX7ZppApmvgvg

    Score
    9/10
    ransomware

    • Renames multiple (3909) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks