Overview

overview

10

Static

static

3

Virus.Hija...95.exe

windows7-x64

10

Virus.Hija...95.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Virus.Hijack.ATA_virussign.com_a3180f52e628a5853445d7d54bfa0795.exe

  • Size

    384KB

  • Sample

    240907-pq2rssvfjc

  • MD5

    a3180f52e628a5853445d7d54bfa0795

  • SHA1

    80e5b176f9ab0e87bda82fb187cc131eb317136e

  • SHA256

    fb1f04a1fc29c43f308ef971ad11fb74c6c5c8c9d7fd022696dddfea90c36d9c

  • SHA512

    b35e70b901901555ad510e3192c623a7ce9826bc2772f957de3bded8a94232afa29be80b13f283c17c69b9e9842bd2c026d4b4dd3bbaed01d7b815cbebba467c

  • SSDEEP

    6144:I7p2FzMDexGyZ6YugQdjGG1wsKm6eBgdQbkoKTBEAz/6DG1ETdqvZNemWrsiLk6:yAzMqGyXu1jGG1wsGeBgRTGAzciETdqS

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      Virus.Hijack.ATA_virussign.com_a3180f52e628a5853445d7d54bfa0795.exe

    • Size

      384KB

    • MD5

      a3180f52e628a5853445d7d54bfa0795

    • SHA1

      80e5b176f9ab0e87bda82fb187cc131eb317136e

    • SHA256

      fb1f04a1fc29c43f308ef971ad11fb74c6c5c8c9d7fd022696dddfea90c36d9c

    • SHA512

      b35e70b901901555ad510e3192c623a7ce9826bc2772f957de3bded8a94232afa29be80b13f283c17c69b9e9842bd2c026d4b4dd3bbaed01d7b815cbebba467c

    • SSDEEP

      6144:I7p2FzMDexGyZ6YugQdjGG1wsKm6eBgdQbkoKTBEAz/6DG1ETdqvZNemWrsiLk6:yAzMqGyXu1jGG1wsGeBgRTGAzciETdqS

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks