Overview

overview

10

Static

static

3

Virus.Hija...f1.exe

windows7-x64

1

Virus.Hija...f1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Virus.Hijack.ATA_virussign.com_b34efaf965aef702715ec05ae5c40af1.exe

  • Size

    565KB

  • Sample

    240907-pq4ldsvfla

  • MD5

    b34efaf965aef702715ec05ae5c40af1

  • SHA1

    f7808486d806b1e9e8eab685c4feaceafc78494f

  • SHA256

    2190a26c5f82ec5f8de35652f6a52817446878d4ae1527d74ffe314395374db4

  • SHA512

    bef1dac9a55f01018703c648da59de70c0a4f8d40de446aab33eb54be85c396ab63f5791cf5f2e6bbb54a1ec51309360e1265e43f8ce7bb37f39432bf0cc74f2

  • SSDEEP

    12288:7QskPqtuFjAh//+zrWAIAqWim/+zrWAI5KF8OX:VHtuFjAh/mvFimm09OX

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      Virus.Hijack.ATA_virussign.com_b34efaf965aef702715ec05ae5c40af1.exe

    • Size

      565KB

    • MD5

      b34efaf965aef702715ec05ae5c40af1

    • SHA1

      f7808486d806b1e9e8eab685c4feaceafc78494f

    • SHA256

      2190a26c5f82ec5f8de35652f6a52817446878d4ae1527d74ffe314395374db4

    • SHA512

      bef1dac9a55f01018703c648da59de70c0a4f8d40de446aab33eb54be85c396ab63f5791cf5f2e6bbb54a1ec51309360e1265e43f8ce7bb37f39432bf0cc74f2

    • SSDEEP

      12288:7QskPqtuFjAh//+zrWAIAqWim/+zrWAI5KF8OX:VHtuFjAh/mvFimm09OX

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks