Analysis
-
max time kernel
141s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
10/06/2024, 21:55
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
VirusShare_c296b0feba2476decb0c90b2616bae59.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
VirusShare_c296b0feba2476decb0c90b2616bae59.exe
Resource
win10v2004-20240226-en
3 signatures
150 seconds
General
-
Target
VirusShare_c296b0feba2476decb0c90b2616bae59.exe
-
Size
518KB
-
MD5
c296b0feba2476decb0c90b2616bae59
-
SHA1
cae908847fd7788d20592574bae9a552d21edd88
-
SHA256
ddf176666832be1bf4355a137be1a6187d724304a1de0a5b779beb89e15c51d7
-
SHA512
dffb54bb753df6a9274ec0d0981931840fc33cd292eaf95945861914b11208d9f42f4988e28271a89623e51865fece631d05338ff085dd3916a4edb9eaca2a03
-
SSDEEP
12288:nGrAjevZMSm+R5vWnnm4F5vYrGdT9QRq4KjUBc3yj4oT:uAjeBMSBRNEP5ArGAR+jseyjn
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2948-2-0x0000000000400000-0x000000000050F000-memory.dmp upx behavioral1/memory/2948-4-0x0000000000400000-0x000000000050F000-memory.dmp upx behavioral1/memory/2948-6-0x0000000000400000-0x000000000050F000-memory.dmp upx behavioral1/memory/2948-9-0x0000000000400000-0x000000000050F000-memory.dmp upx behavioral1/memory/2948-14-0x0000000000400000-0x000000000050F000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Windows\CurrentVersion\Run\AS2014 = "C:\\ProgramData\\x6gxRgDp\\x6gxRgDp.exe" VirusShare_c296b0feba2476decb0c90b2616bae59.exe