Overview

overview

10

Static

static

3

VirusShare...f0.exe

windows7-x64

10

VirusShare...f0.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    VirusShare_e3546fd2c860d0e9748ad0a1b8e920f0

  • Size

    96KB

  • Sample

    240610-qnkwyaxbka

  • MD5

    e3546fd2c860d0e9748ad0a1b8e920f0

  • SHA1

    a74f28537fdb5da91ba4bff7c45276a567a3ab5f

  • SHA256

    adb461fed13d8569d668da38556794143e6959feb16355ad448672348f115799

  • SHA512

    71673cdd0b05fa34c0f4e8fc6ecf25fd4d08bbd9c7b2682f52e8fc570ab0dd4f4d6cbe539df79e1ea161586bfded64ecc11892abbf370cdb2f822be2bb2eb3d5

  • SSDEEP

    1536:Z98UxFkIaoq+JxpfcRUuo4veQ6QbUtBhbA9iDIDKCuhL+qAi+PU/3VmTN:TkrbecR84veQ6thA9TDDuhL+qAe/30TN

Score
10/10
persistence

Malware Config

Targets

    • Target

      VirusShare_e3546fd2c860d0e9748ad0a1b8e920f0

    • Size

      96KB

    • MD5

      e3546fd2c860d0e9748ad0a1b8e920f0

    • SHA1

      a74f28537fdb5da91ba4bff7c45276a567a3ab5f

    • SHA256

      adb461fed13d8569d668da38556794143e6959feb16355ad448672348f115799

    • SHA512

      71673cdd0b05fa34c0f4e8fc6ecf25fd4d08bbd9c7b2682f52e8fc570ab0dd4f4d6cbe539df79e1ea161586bfded64ecc11892abbf370cdb2f822be2bb2eb3d5

    • SSDEEP

      1536:Z98UxFkIaoq+JxpfcRUuo4veQ6QbUtBhbA9iDIDKCuhL+qAi+PU/3VmTN:TkrbecR84veQ6thA9TDDuhL+qAe/30TN

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks