Overview

overview

10

Static

static

3

VirusShare...f0.exe

windows7-x64

10

VirusShare...f0.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    VirusShare_4f3e1b2e58223b3b6aba8e94725bf0f0

  • Size

    96KB

  • Sample

    240610-pdplpsba22

  • MD5

    4f3e1b2e58223b3b6aba8e94725bf0f0

  • SHA1

    e46450ae16cff1488d435cef186c57c2e940c151

  • SHA256

    948143891c369b3fb085404de9e1ee6d3c0acdd47a96047202040f7ec5db1477

  • SHA512

    44a0c7f15efc617c3533feff8df66e28f178bcd9066dd383ada39f420a1d0c6586760dc0626e11bf1abf49d6fae8eadddacf6f0d5b029c1744b6a6804ea39a40

  • SSDEEP

    1536:EMvSLlIpXIEGvkrD8Al9cqUl4veQaOgjXPK/QCAarYlvlHHOIi0iICsMrPT:SRkXOQ8Qcqs4veQaX7bUJI7OsMrP

Score
10/10
persistence

Malware Config

Targets

    • Target

      VirusShare_4f3e1b2e58223b3b6aba8e94725bf0f0

    • Size

      96KB

    • MD5

      4f3e1b2e58223b3b6aba8e94725bf0f0

    • SHA1

      e46450ae16cff1488d435cef186c57c2e940c151

    • SHA256

      948143891c369b3fb085404de9e1ee6d3c0acdd47a96047202040f7ec5db1477

    • SHA512

      44a0c7f15efc617c3533feff8df66e28f178bcd9066dd383ada39f420a1d0c6586760dc0626e11bf1abf49d6fae8eadddacf6f0d5b029c1744b6a6804ea39a40

    • SSDEEP

      1536:EMvSLlIpXIEGvkrD8Al9cqUl4veQaOgjXPK/QCAarYlvlHHOIi0iICsMrPT:SRkXOQ8Qcqs4veQaX7bUJI7OsMrP

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks