Overview

overview

10

Static

static

3

VirusShare...eb.exe

windows7-x64

10

VirusShare...eb.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    VirusShare_065531ceadb0a80bd42cc67739895eeb
  • Size 60KB
  • Sample240610-1cc23a1cqa
  • SHA256 1815549893a91785814054c932d7528ec34cab10f6045f7a514519c77feb9884
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
persistenceupx

Malware Config

Targets

    • Target
      VirusShare_065531ceadb0a80bd42cc67739895eeb
    • Size 60KB
    • SHA256 1815549893a91785814054c932d7528ec34cab10f6045f7a514519c77feb9884
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks