Overview

overview

10

Static

static

3

virussign....30.exe

windows7-x64

10

virussign....30.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    virussign.com_d51cc95cabcff81602b8cf1da4f38f30.exe

  • Size

    400KB

  • Sample

    240907-prqqxsvfpq

  • MD5

    d51cc95cabcff81602b8cf1da4f38f30

  • SHA1

    eab6548be27ddcff21582f9357873290b2b3cc87

  • SHA256

    a4d459190d49f916ed88c5813b980e36c31a3810972c6c62b49f1dd8cd792db8

  • SHA512

    757e1034801b191e9650ab0e84704ac8a81b8e3f0055f4435ed1ca2a7c439c7379e290c6ac79555292560ee490d4be1861c09926511958de22e2b954a401e90a

  • SSDEEP

    6144:AEmHOHfWSTQUSdLAY/Xr4Br3CbArLAZ26RQ8sY6CbArLAY/9bPk6Cbv:AEmMWS83Rrgryg426RQagrkj

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      virussign.com_d51cc95cabcff81602b8cf1da4f38f30.exe

    • Size

      400KB

    • MD5

      d51cc95cabcff81602b8cf1da4f38f30

    • SHA1

      eab6548be27ddcff21582f9357873290b2b3cc87

    • SHA256

      a4d459190d49f916ed88c5813b980e36c31a3810972c6c62b49f1dd8cd792db8

    • SHA512

      757e1034801b191e9650ab0e84704ac8a81b8e3f0055f4435ed1ca2a7c439c7379e290c6ac79555292560ee490d4be1861c09926511958de22e2b954a401e90a

    • SSDEEP

      6144:AEmHOHfWSTQUSdLAY/Xr4Br3CbArLAZ26RQ8sY6CbArLAY/9bPk6Cbv:AEmMWS83Rrgryg426RQagrkj

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks