Overview

overview

7

Static

static

3

virussign....80.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    virussign.com_a8e39a8a45bbc70dff56a770d2fc8a80.vir

  • Size

    5.1MB

  • Sample

    240602-xzt3bada57

  • MD5

    a8e39a8a45bbc70dff56a770d2fc8a80

  • SHA1

    82478c131f71759fb567b59b2c3204ca6cadead2

  • SHA256

    deccc2fbd1dd06d38919163f7d52604ec3761b911a5fd659a37aa70ff22e37ea

  • SHA512

    0219daaa3e63b300219c2e5182e495670bcdf082083afe252a4a89e36efc3e83590b9662b923541d213b8e42c4d071e5def6bef1fd3daf3cd7890efa6d9de747

  • SSDEEP

    98304:VyENIIut+hl5p19HLOaFAIH3TcLWGO7d09GZkrCRfRFj2jF:wEN2tm5p3uU3TcLWGO7djZkrC5RF8F

Score
7/10
evasionspywarestealertrojan

Malware Config

Targets

    • Target

      virussign.com_a8e39a8a45bbc70dff56a770d2fc8a80.vir

    • Size

      5.1MB

    • MD5

      a8e39a8a45bbc70dff56a770d2fc8a80

    • SHA1

      82478c131f71759fb567b59b2c3204ca6cadead2

    • SHA256

      deccc2fbd1dd06d38919163f7d52604ec3761b911a5fd659a37aa70ff22e37ea

    • SHA512

      0219daaa3e63b300219c2e5182e495670bcdf082083afe252a4a89e36efc3e83590b9662b923541d213b8e42c4d071e5def6bef1fd3daf3cd7890efa6d9de747

    • SSDEEP

      98304:VyENIIut+hl5p19HLOaFAIH3TcLWGO7d09GZkrCRfRFj2jF:wEN2tm5p3uU3TcLWGO7djZkrC5RF8F

    Score
    7/10
    evasionspywarestealertrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks whether UAC is enabled

      evasiontrojan

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks