General
-
Target
2024-06-09_8706fa98bcafd7c8dd9371cfa5e276ce_virlock
-
Size
208KB
-
Sample
240609-p4nr4aag5v
-
MD5
8706fa98bcafd7c8dd9371cfa5e276ce
-
SHA1
0ad85ca2a9fe713a2653714455c53053979a7fdf
-
SHA256
aeafa89878bf1bf20f74243b4fc8bd37a53e03745238c0fe587fa4025e45bd5f
-
SHA512
f4f542dd77be41691d31b2b5fcdc034771146dc5d8bf5f7b92ed0ad1cb5372cd8b4947ec908ec5a192551fa1b1d19d848c261d1f96f77538c19147da96d32bae
-
SSDEEP
3072:PoWje0y9cn8qcJZceaBUn/8RdHnif0jDl0ocCLWGg/Wc5GAce+39oB:PoDP2jTdHne0vyCA95GAc539
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-09_8706fa98bcafd7c8dd9371cfa5e276ce_virlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-09_8706fa98bcafd7c8dd9371cfa5e276ce_virlock.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-06-09_8706fa98bcafd7c8dd9371cfa5e276ce_virlock
-
Size
208KB
-
MD5
8706fa98bcafd7c8dd9371cfa5e276ce
-
SHA1
0ad85ca2a9fe713a2653714455c53053979a7fdf
-
SHA256
aeafa89878bf1bf20f74243b4fc8bd37a53e03745238c0fe587fa4025e45bd5f
-
SHA512
f4f542dd77be41691d31b2b5fcdc034771146dc5d8bf5f7b92ed0ad1cb5372cd8b4947ec908ec5a192551fa1b1d19d848c261d1f96f77538c19147da96d32bae
-
SSDEEP
3072:PoWje0y9cn8qcJZceaBUn/8RdHnif0jDl0ocCLWGg/Wc5GAce+39oB:PoDP2jTdHne0vyCA95GAc539
Score10/10-
Modifies visibility of file extensions in Explorer
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1