Overview

overview

10

Static

static

3

Virus.Hija...1b.exe

windows7-x64

10

Virus.Hija...1b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Virus.Hijack.ATA_virussign.com_0c6351241648faa4169f935d1c5f3d1b.exe

  • Size

    448KB

  • Sample

    240907-pmgmfsvapl

  • MD5

    0c6351241648faa4169f935d1c5f3d1b

  • SHA1

    447ba87227f6ccb776cdbd947e882513cfdd66d2

  • SHA256

    e3d143eff9d4e922c0472926b594559d7567aad36bfe32f17136251e29bb84a5

  • SHA512

    c3538bfaf059346a30bf8b35e45f72f6dc85221753339e75e952e505ac5cabd540f2b388ebefb860f96f35b89537b2087278f5e2ba3f405553e8e35e288efd1c

  • SSDEEP

    12288:qJLv7mMmmpNs/VXMmmg8MmmpNs/VXMmmA:qJTrEdAgxEdAA

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      Virus.Hijack.ATA_virussign.com_0c6351241648faa4169f935d1c5f3d1b.exe

    • Size

      448KB

    • MD5

      0c6351241648faa4169f935d1c5f3d1b

    • SHA1

      447ba87227f6ccb776cdbd947e882513cfdd66d2

    • SHA256

      e3d143eff9d4e922c0472926b594559d7567aad36bfe32f17136251e29bb84a5

    • SHA512

      c3538bfaf059346a30bf8b35e45f72f6dc85221753339e75e952e505ac5cabd540f2b388ebefb860f96f35b89537b2087278f5e2ba3f405553e8e35e288efd1c

    • SSDEEP

      12288:qJLv7mMmmpNs/VXMmmg8MmmpNs/VXMmmA:qJTrEdAgxEdAA

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks