Overview
overview
10Static
static
3028d53f522...fa.exe
windows7-x64
10028d53f522...fa.exe
windows10-2004-x64
10Bot_Checker.exe
windows7-x64
3Bot_Checker.exe
windows10-2004-x64
7Uninstall.exe
windows7-x64
3Uninstall.exe
windows10-2004-x64
7Versium.exe
windows7-x64
7Versium.exe
windows10-2004-x64
7VersiumRes...it.exe
windows7-x64
10VersiumRes...it.exe
windows10-2004-x64
10VersiumRes...it.exe
windows7-x64
1VersiumRes...it.exe
windows10-2004-x64
1Versiumresearch.exe
windows7-x64
6Versiumresearch.exe
windows10-2004-x64
6Analysis
-
max time kernel
150s -
max time network
137s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
11-11-2024 11:14
Static task
static1
Behavioral task
behavioral1
Sample
028d53f5224f9cc8c60bd953504f1efa.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
028d53f5224f9cc8c60bd953504f1efa.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Bot_Checker.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Bot_Checker.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Uninstall.exe
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
Uninstall.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Versium.exe
Resource
win7-20241023-en
Behavioral task
behavioral8
Sample
Versium.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
VersiumResearch32bit.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
VersiumResearch32bit.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
VersiumResearch64bit.exe
Resource
win7-20241010-en
Behavioral task
behavioral12
Sample
VersiumResearch64bit.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Versiumresearch.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Versiumresearch.exe
Resource
win10v2004-20241007-en
General
-
Target
VersiumResearch64bit.exe
-
Size
252KB
-
MD5
ee19bc8a2b6c6fd7c30037389457a4df
-
SHA1
e1fca1cc33574e59dec62763ee6e7de1a5198095
-
SHA256
76af8837a5ac0384faeeeff8c8987f796206fc4a1691428dbd44a14378ff28c0
-
SHA512
38db6d4ca6f106849f2ba173e20dae0a53c3e558eb676adba380761cc0318769c6add3a2e816705c094596fc305dab1dd39eb2b83e9f3e066ffc90de580af001
-
SSDEEP
3072:45uNO+8s6V5WQZV08YLmqa/Qh10UNtGOWmA3hLKKKKKU8AAFTbp8ELQHsoOJNuY2:45W8sscuVVYLOoh1MGfJXnIZRhv
Malware Config
Signatures
-
Suspicious behavior: LoadsDriver 64 IoCs
pid Process 2228 Process not Found 936 Process not Found 2860 Process not Found 376 Process not Found 1168 Process not Found 4364 Process not Found 4940 Process not Found 4564 Process not Found 3884 Process not Found 2132 Process not Found 1296 Process not Found 4980 Process not Found 1996 Process not Found 540 Process not Found 1148 Process not Found 2896 Process not Found 5024 Process not Found 452 Process not Found 2068 Process not Found 3464 Process not Found 2120 Process not Found 2528 Process not Found 2540 Process not Found 3860 Process not Found 3440 Process not Found 1268 Process not Found 1564 Process not Found 1172 Process not Found 2636 Process not Found 1908 Process not Found 3368 Process not Found 4748 Process not Found 2700 Process not Found 3500 Process not Found 2960 Process not Found 1956 Process not Found 3256 Process not Found 2616 Process not Found 2936 Process not Found 4988 Process not Found 4292 Process not Found 4600 Process not Found 3352 Process not Found 1272 Process not Found 3528 Process not Found 4976 Process not Found 2272 Process not Found 2144 Process not Found 4068 Process not Found 1508 Process not Found 1788 Process not Found 1724 Process not Found 1844 Process not Found 3668 Process not Found 3108 Process not Found 4436 Process not Found 4848 Process not Found 3080 Process not Found 2568 Process not Found 848 Process not Found 3400 Process not Found 4056 Process not Found 4276 Process not Found 4192 Process not Found