Overview

overview

10

Static

static

3

Virus.Hija...40.exe

windows7-x64

10

Virus.Hija...40.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    Virus.Hijack.ATA_virussign.com_5631ee98ebe332eab80e206580261b40.exe

  • Size

    101KB

  • Sample

    240907-pmlw6svbjr

  • MD5

    5631ee98ebe332eab80e206580261b40

  • SHA1

    ebd3bc14a60cd87c9716f1ef184186d16f6ee081

  • SHA256

    a75e547cb1f43118dd723d88b729a7ea26bb17c58cfc8a5db9040857fe37d203

  • SHA512

    7cbc96a2e9d8cfeef14459bc16cd92e04a135577c7cdcda5b5596e12e843cdad1167dd7415d61b96cef25eb54f433f2135ebce4e69a2a27e83d5181f2e8ef3a6

  • SSDEEP

    3072:yHfu/J5BiSduXqbyu0sY7q5AnrHY4vDX:8K3i5853Anr44vDX

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      Virus.Hijack.ATA_virussign.com_5631ee98ebe332eab80e206580261b40.exe

    • Size

      101KB

    • MD5

      5631ee98ebe332eab80e206580261b40

    • SHA1

      ebd3bc14a60cd87c9716f1ef184186d16f6ee081

    • SHA256

      a75e547cb1f43118dd723d88b729a7ea26bb17c58cfc8a5db9040857fe37d203

    • SHA512

      7cbc96a2e9d8cfeef14459bc16cd92e04a135577c7cdcda5b5596e12e843cdad1167dd7415d61b96cef25eb54f433f2135ebce4e69a2a27e83d5181f2e8ef3a6

    • SSDEEP

      3072:yHfu/J5BiSduXqbyu0sY7q5AnrHY4vDX:8K3i5853Anr44vDX

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks