Overview

overview

7

Static

static

1

vivo.exe

windows7-x64

7

vivo.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    vivo.exe

  • Size

    42.9MB

  • Sample

    240809-bhtvbstflq

  • MD5

    3f4ff08931b61eba84a60d9ff9b17e1b

  • SHA1

    26d300c1725fcc78e587c1d330ba41a573fabaa3

  • SHA256

    a55b0b2fdb67ec7d32f24fe08273e17f1d2f110a5081941fbe81b7a6c1ae7d41

  • SHA512

    219cb9c42cb0a110311c5ceec532f9d522cd0bd2663e590274b735b2135029cf0c252aa5759435f1006cd8f66f6fb00a0c77f4efdf7b2041cea6d968ffbd02aa

  • SSDEEP

    786432:9hj9QH1qYcn2Pi0wO2nWFv2iPY9Nhn84tX90on1HxXnhANdg9NaJQfWVhoLA5nzM:3JQkZb0v2nZuY9r88X90gxXnAdgjaieQ

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      vivo.exe

    • Size

      42.9MB

    • MD5

      3f4ff08931b61eba84a60d9ff9b17e1b

    • SHA1

      26d300c1725fcc78e587c1d330ba41a573fabaa3

    • SHA256

      a55b0b2fdb67ec7d32f24fe08273e17f1d2f110a5081941fbe81b7a6c1ae7d41

    • SHA512

      219cb9c42cb0a110311c5ceec532f9d522cd0bd2663e590274b735b2135029cf0c252aa5759435f1006cd8f66f6fb00a0c77f4efdf7b2041cea6d968ffbd02aa

    • SSDEEP

      786432:9hj9QH1qYcn2Pi0wO2nWFv2iPY9Nhn84tX90on1HxXnhANdg9NaJQfWVhoLA5nzM:3JQkZb0v2nZuY9r88X90gxXnAdgjaieQ

    Score
    7/10
    discoverypersistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks