Overview
overview
10Static
static
10virusshare...87.exe
windows10-2004-x64
1virusshare...87.exe
windows11-21h2-x64
1virusshare...4d.exe
windows10-2004-x64
5virusshare...4d.exe
windows11-21h2-x64
5virusshare...c9.xls
windows10-2004-x64
10virusshare...c9.xls
windows11-21h2-x64
10virusshare...f9.doc
windows10-2004-x64
10virusshare...f9.doc
windows11-21h2-x64
10virusshare...30.pdf
windows10-2004-x64
3virusshare...30.pdf
windows11-21h2-x64
3virusshare...re.exe
windows10-2004-x64
1virusshare...re.exe
windows11-21h2-x64
1virusshare...8d.exe
windows10-2004-x64
3virusshare...8d.exe
windows11-21h2-x64
3virusshare...fa.exe
windows10-2004-x64
3virusshare...fa.exe
windows11-21h2-x64
3virusshare...c8.doc
windows10-2004-x64
10virusshare...c8.doc
windows11-21h2-x64
10virusshare...03.doc
windows10-2004-x64
1virusshare...03.doc
windows11-21h2-x64
1virusshare...40.pdf
windows10-2004-x64
3virusshare...40.pdf
windows11-21h2-x64
3virusshare...ng.apk
android-9-x86
virusshare...ng.apk
android-10-x64
virusshare...ng.apk
android-11-x64
virusshare...4e.doc
windows10-2004-x64
1virusshare...4e.doc
windows11-21h2-x64
1virusshare...cd.pdf
windows10-2004-x64
3virusshare...cd.pdf
windows11-21h2-x64
3virusshare...7b.exe
windows10-2004-x64
10virusshare...7b.exe
windows11-21h2-x64
10virusshare...82.exe
windows10-2004-x64
3Resubmissions
16/04/2025, 23:23
250416-3dkjmsw1ds 1016/04/2025, 23:22
250416-3crxbs1ms5 1016/04/2025, 23:16
250416-29atms1ly8 1016/04/2025, 23:10
250416-2523bswzgx 1016/04/2025, 21:45
250416-1madxsvzg1 1016/04/2025, 21:28
250416-1be52azmt6 1016/04/2025, 21:16
250416-z4vkrazlz9 1016/04/2025, 21:06
250416-zx2eqavygy 10Analysis
-
max time kernel
133s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-es -
resource tags
arch:x64arch:x86image:win10v2004-20250314-eslocale:es-esos:windows10-2004-x64systemwindows -
submitted
16/04/2025, 23:23
Static task
static1
Behavioral task
behavioral1
Sample
virusshare/1/VirusShare_0a2d1ecedf3f79754aa2c18d62e75287.exe
Resource
win10v2004-20250314-es
Behavioral task
behavioral2
Sample
virusshare/1/VirusShare_0a2d1ecedf3f79754aa2c18d62e75287.exe
Resource
win11-20250410-es
Behavioral task
behavioral3
Sample
virusshare/1/VirusShare_0aee78510c46e3a200b6bc21ac1c954d.exe
Resource
win10v2004-20250314-es
Behavioral task
behavioral4
Sample
virusshare/1/VirusShare_0aee78510c46e3a200b6bc21ac1c954d.exe
Resource
win11-20250410-es
Behavioral task
behavioral5
Sample
virusshare/1/VirusShare_0fea640a7da27f365b3675f73626b9c9.xls
Resource
win10v2004-20250313-es
Behavioral task
behavioral6
Sample
virusshare/1/VirusShare_0fea640a7da27f365b3675f73626b9c9.xls
Resource
win11-20250410-es
Behavioral task
behavioral7
Sample
virusshare/1/VirusShare_1ba8249d8503c0cf7bc125588c43bef9.doc
Resource
win10v2004-20250410-es
Behavioral task
behavioral8
Sample
virusshare/1/VirusShare_1ba8249d8503c0cf7bc125588c43bef9.doc
Resource
win11-20250410-es
Behavioral task
behavioral9
Sample
virusshare/1/VirusShare_3cd9a967b67fe69351e390195ca7a430.pdf
Resource
win10v2004-20250410-es
Behavioral task
behavioral10
Sample
virusshare/1/VirusShare_3cd9a967b67fe69351e390195ca7a430.pdf
Resource
win11-20250410-es
Behavioral task
behavioral11
Sample
virusshare/1/malware.exe
Resource
win10v2004-20250314-es
Behavioral task
behavioral12
Sample
virusshare/1/malware.exe
Resource
win11-20250410-es
Behavioral task
behavioral13
Sample
virusshare/2/VirusShare_01b55404de50bd1a56343b2f316ff88d.exe
Resource
win10v2004-20250314-es
Behavioral task
behavioral14
Sample
virusshare/2/VirusShare_01b55404de50bd1a56343b2f316ff88d.exe
Resource
win11-20250410-es
Behavioral task
behavioral15
Sample
virusshare/2/VirusShare_1ad9a67240d5775395c45b64dd6529fa.exe
Resource
win10v2004-20250314-es
Behavioral task
behavioral16
Sample
virusshare/2/VirusShare_1ad9a67240d5775395c45b64dd6529fa.exe
Resource
win11-20250410-es
Behavioral task
behavioral17
Sample
virusshare/2/VirusShare_2fe5b00079aec2d8369a798230313ec8.doc
Resource
win10v2004-20250314-es
Behavioral task
behavioral18
Sample
virusshare/2/VirusShare_2fe5b00079aec2d8369a798230313ec8.doc
Resource
win11-20250410-es
Behavioral task
behavioral19
Sample
virusshare/2/VirusShare_3f0b1eed4b7b9ae05fab4d949843f103.doc
Resource
win10v2004-20250313-es
Behavioral task
behavioral20
Sample
virusshare/2/VirusShare_3f0b1eed4b7b9ae05fab4d949843f103.doc
Resource
win11-20250410-es
Behavioral task
behavioral21
Sample
virusshare/2/VirusShare_480ef02bb062a57724e1b3e14532a140.pdf
Resource
win10v2004-20250410-es
Behavioral task
behavioral22
Sample
virusshare/2/VirusShare_480ef02bb062a57724e1b3e14532a140.pdf
Resource
win11-20250410-es
Behavioral task
behavioral23
Sample
virusshare/2/wedding.apk
Resource
android-x86-arm-20240910-es
Behavioral task
behavioral24
Sample
virusshare/2/wedding.apk
Resource
android-x64-20240910-es
Behavioral task
behavioral25
Sample
virusshare/2/wedding.apk
Resource
android-x64-arm64-20240910-es
Behavioral task
behavioral26
Sample
virusshare/3/VirusShare_3fb34964fa7b8c6bfad8d960380ff04e.doc
Resource
win10v2004-20250314-es
Behavioral task
behavioral27
Sample
virusshare/3/VirusShare_3fb34964fa7b8c6bfad8d960380ff04e.doc
Resource
win11-20250410-es
Behavioral task
behavioral28
Sample
virusshare/3/VirusShare_4675e87be15585e66b0c88b833dd9ecd.pdf
Resource
win10v2004-20250410-es
Behavioral task
behavioral29
Sample
virusshare/3/VirusShare_4675e87be15585e66b0c88b833dd9ecd.pdf
Resource
win11-20250410-es
Behavioral task
behavioral30
Sample
virusshare/3/VirusShare_4aa5734fe9c86184f931f4ddaf2d4d7b.exe
Resource
win10v2004-20250410-es
Behavioral task
behavioral31
Sample
virusshare/3/VirusShare_4aa5734fe9c86184f931f4ddaf2d4d7b.exe
Resource
win11-20250410-es
Behavioral task
behavioral32
Sample
virusshare/3/VirusShare_5c8b670c503455baafbff400a446cf82.exe
Resource
win10v2004-20250314-es
General
-
Target
virusshare/3/VirusShare_3fb34964fa7b8c6bfad8d960380ff04e.doc
-
Size
34KB
-
MD5
3fb34964fa7b8c6bfad8d960380ff04e
-
SHA1
9a3aec40056ce74bac833989ed71dfb6c2626f4c
-
SHA256
26026b1b3d0cb660c6be6c536df679acca0b5562a3adbb507d001474d23f5650
-
SHA512
a82b522dfd7eac30292a9e9ab19ddac94563804e77a1090e5f44de7e794ef4e5ebe0e7fb36e5177479417c8176ae0475613700755ca015c7ce941a4740215faa
-
SSDEEP
384:bzIPMepSbSsG/CdPvunCpeJzKoSS3D6JO5LfBqtjbjk4Eohubn3ezta:nIPMecWsGKVunFFRDE6pqjhust
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 WINWORD.EXE Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz WINWORD.EXE Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString WINWORD.EXE -
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS WINWORD.EXE Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily WINWORD.EXE Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU WINWORD.EXE -
Suspicious behavior: AddClipboardFormatListener 2 IoCs
pid Process 1148 WINWORD.EXE 1148 WINWORD.EXE -
Suspicious use of SetWindowsHookEx 16 IoCs
pid Process 1148 WINWORD.EXE 1148 WINWORD.EXE 1148 WINWORD.EXE 1148 WINWORD.EXE 1148 WINWORD.EXE 1148 WINWORD.EXE 1148 WINWORD.EXE 1148 WINWORD.EXE 1148 WINWORD.EXE 1148 WINWORD.EXE 1148 WINWORD.EXE 1148 WINWORD.EXE 1148 WINWORD.EXE 1148 WINWORD.EXE 1148 WINWORD.EXE 1148 WINWORD.EXE
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\virusshare\3\VirusShare_3fb34964fa7b8c6bfad8d960380ff04e.doc" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:1148