Overview

overview

10

Static

static

3

Virus.Hija...d5.exe

windows7-x64

10

Virus.Hija...d5.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Virus.Hijack.ATA_virussign.com_6d2037eea6165c344bcc3e0bb841e2d5.exe

  • Size

    96KB

  • Sample

    240907-p1yswswgkq

  • MD5

    6d2037eea6165c344bcc3e0bb841e2d5

  • SHA1

    a54264d8f33832a15af636a0b59fe8b3b452ad20

  • SHA256

    f177fd100e466fb856968c4c81f1f1c1f2f8b71849855fb939b8822ea9e01b8a

  • SHA512

    826aafc11fdf5d496e75fbf203234a7a6e9991343990fb979173388a1db5e939bc5d0659b3088fa1c62348be542864b81a3704d16ed401cccac69fb56a618887

  • SSDEEP

    1536:GvMuLWP6v2reHQONvXMZqNd8B+62LeQ7RZObZUUWaegPYA:huwSqsHfClUUWae

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      Virus.Hijack.ATA_virussign.com_6d2037eea6165c344bcc3e0bb841e2d5.exe

    • Size

      96KB

    • MD5

      6d2037eea6165c344bcc3e0bb841e2d5

    • SHA1

      a54264d8f33832a15af636a0b59fe8b3b452ad20

    • SHA256

      f177fd100e466fb856968c4c81f1f1c1f2f8b71849855fb939b8822ea9e01b8a

    • SHA512

      826aafc11fdf5d496e75fbf203234a7a6e9991343990fb979173388a1db5e939bc5d0659b3088fa1c62348be542864b81a3704d16ed401cccac69fb56a618887

    • SSDEEP

      1536:GvMuLWP6v2reHQONvXMZqNd8B+62LeQ7RZObZUUWaegPYA:huwSqsHfClUUWae

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks