Overview
overview
10Static
static
10virusshare...87.exe
windows10-2004-x64
1virusshare...87.exe
windows11-21h2-x64
1virusshare...4d.exe
windows10-2004-x64
5virusshare...4d.exe
windows11-21h2-x64
5virusshare...c9.xls
windows10-2004-x64
10virusshare...c9.xls
windows11-21h2-x64
10virusshare...f9.doc
windows10-2004-x64
10virusshare...f9.doc
windows11-21h2-x64
10virusshare...30.pdf
windows10-2004-x64
3virusshare...30.pdf
windows11-21h2-x64
3virusshare...re.exe
windows10-2004-x64
1virusshare...re.exe
windows11-21h2-x64
1virusshare...8d.exe
windows10-2004-x64
3virusshare...8d.exe
windows11-21h2-x64
3virusshare...fa.exe
windows10-2004-x64
3virusshare...fa.exe
windows11-21h2-x64
3virusshare...c8.doc
windows10-2004-x64
10virusshare...c8.doc
windows11-21h2-x64
10virusshare...03.doc
windows10-2004-x64
1virusshare...03.doc
windows11-21h2-x64
1virusshare...40.pdf
windows10-2004-x64
3virusshare...40.pdf
windows11-21h2-x64
3virusshare...ng.apk
android-9-x86
virusshare...ng.apk
android-10-x64
virusshare...ng.apk
android-11-x64
virusshare...4e.doc
windows10-2004-x64
1virusshare...4e.doc
windows11-21h2-x64
1virusshare...cd.pdf
windows10-2004-x64
3virusshare...cd.pdf
windows11-21h2-x64
3virusshare...7b.exe
windows10-2004-x64
10virusshare...7b.exe
windows11-21h2-x64
10virusshare...82.exe
windows10-2004-x64
3Resubmissions
16/04/2025, 23:23
250416-3dkjmsw1ds 1016/04/2025, 23:22
250416-3crxbs1ms5 1016/04/2025, 23:16
250416-29atms1ly8 1016/04/2025, 23:10
250416-2523bswzgx 1016/04/2025, 21:45
250416-1madxsvzg1 1016/04/2025, 21:28
250416-1be52azmt6 1016/04/2025, 21:16
250416-z4vkrazlz9 1016/04/2025, 21:06
250416-zx2eqavygy 10Analysis
-
max time kernel
133s -
max time network
144s -
platform
windows11-21h2_x64 -
resource
win11-20250410-es -
resource tags
arch:x64arch:x86image:win11-20250410-eslocale:es-esos:windows11-21h2-x64systemwindows -
submitted
16/04/2025, 23:23
Static task
static1
Behavioral task
behavioral1
Sample
virusshare/1/VirusShare_0a2d1ecedf3f79754aa2c18d62e75287.exe
Resource
win10v2004-20250314-es
Behavioral task
behavioral2
Sample
virusshare/1/VirusShare_0a2d1ecedf3f79754aa2c18d62e75287.exe
Resource
win11-20250410-es
Behavioral task
behavioral3
Sample
virusshare/1/VirusShare_0aee78510c46e3a200b6bc21ac1c954d.exe
Resource
win10v2004-20250314-es
Behavioral task
behavioral4
Sample
virusshare/1/VirusShare_0aee78510c46e3a200b6bc21ac1c954d.exe
Resource
win11-20250410-es
Behavioral task
behavioral5
Sample
virusshare/1/VirusShare_0fea640a7da27f365b3675f73626b9c9.xls
Resource
win10v2004-20250313-es
Behavioral task
behavioral6
Sample
virusshare/1/VirusShare_0fea640a7da27f365b3675f73626b9c9.xls
Resource
win11-20250410-es
Behavioral task
behavioral7
Sample
virusshare/1/VirusShare_1ba8249d8503c0cf7bc125588c43bef9.doc
Resource
win10v2004-20250410-es
Behavioral task
behavioral8
Sample
virusshare/1/VirusShare_1ba8249d8503c0cf7bc125588c43bef9.doc
Resource
win11-20250410-es
Behavioral task
behavioral9
Sample
virusshare/1/VirusShare_3cd9a967b67fe69351e390195ca7a430.pdf
Resource
win10v2004-20250410-es
Behavioral task
behavioral10
Sample
virusshare/1/VirusShare_3cd9a967b67fe69351e390195ca7a430.pdf
Resource
win11-20250410-es
Behavioral task
behavioral11
Sample
virusshare/1/malware.exe
Resource
win10v2004-20250314-es
Behavioral task
behavioral12
Sample
virusshare/1/malware.exe
Resource
win11-20250410-es
Behavioral task
behavioral13
Sample
virusshare/2/VirusShare_01b55404de50bd1a56343b2f316ff88d.exe
Resource
win10v2004-20250314-es
Behavioral task
behavioral14
Sample
virusshare/2/VirusShare_01b55404de50bd1a56343b2f316ff88d.exe
Resource
win11-20250410-es
Behavioral task
behavioral15
Sample
virusshare/2/VirusShare_1ad9a67240d5775395c45b64dd6529fa.exe
Resource
win10v2004-20250314-es
Behavioral task
behavioral16
Sample
virusshare/2/VirusShare_1ad9a67240d5775395c45b64dd6529fa.exe
Resource
win11-20250410-es
Behavioral task
behavioral17
Sample
virusshare/2/VirusShare_2fe5b00079aec2d8369a798230313ec8.doc
Resource
win10v2004-20250314-es
Behavioral task
behavioral18
Sample
virusshare/2/VirusShare_2fe5b00079aec2d8369a798230313ec8.doc
Resource
win11-20250410-es
Behavioral task
behavioral19
Sample
virusshare/2/VirusShare_3f0b1eed4b7b9ae05fab4d949843f103.doc
Resource
win10v2004-20250313-es
Behavioral task
behavioral20
Sample
virusshare/2/VirusShare_3f0b1eed4b7b9ae05fab4d949843f103.doc
Resource
win11-20250410-es
Behavioral task
behavioral21
Sample
virusshare/2/VirusShare_480ef02bb062a57724e1b3e14532a140.pdf
Resource
win10v2004-20250410-es
Behavioral task
behavioral22
Sample
virusshare/2/VirusShare_480ef02bb062a57724e1b3e14532a140.pdf
Resource
win11-20250410-es
Behavioral task
behavioral23
Sample
virusshare/2/wedding.apk
Resource
android-x86-arm-20240910-es
Behavioral task
behavioral24
Sample
virusshare/2/wedding.apk
Resource
android-x64-20240910-es
Behavioral task
behavioral25
Sample
virusshare/2/wedding.apk
Resource
android-x64-arm64-20240910-es
Behavioral task
behavioral26
Sample
virusshare/3/VirusShare_3fb34964fa7b8c6bfad8d960380ff04e.doc
Resource
win10v2004-20250314-es
Behavioral task
behavioral27
Sample
virusshare/3/VirusShare_3fb34964fa7b8c6bfad8d960380ff04e.doc
Resource
win11-20250410-es
Behavioral task
behavioral28
Sample
virusshare/3/VirusShare_4675e87be15585e66b0c88b833dd9ecd.pdf
Resource
win10v2004-20250410-es
Behavioral task
behavioral29
Sample
virusshare/3/VirusShare_4675e87be15585e66b0c88b833dd9ecd.pdf
Resource
win11-20250410-es
Behavioral task
behavioral30
Sample
virusshare/3/VirusShare_4aa5734fe9c86184f931f4ddaf2d4d7b.exe
Resource
win10v2004-20250410-es
Behavioral task
behavioral31
Sample
virusshare/3/VirusShare_4aa5734fe9c86184f931f4ddaf2d4d7b.exe
Resource
win11-20250410-es
Behavioral task
behavioral32
Sample
virusshare/3/VirusShare_5c8b670c503455baafbff400a446cf82.exe
Resource
win10v2004-20250314-es
General
-
Target
virusshare/3/VirusShare_3fb34964fa7b8c6bfad8d960380ff04e.doc
-
Size
34KB
-
MD5
3fb34964fa7b8c6bfad8d960380ff04e
-
SHA1
9a3aec40056ce74bac833989ed71dfb6c2626f4c
-
SHA256
26026b1b3d0cb660c6be6c536df679acca0b5562a3adbb507d001474d23f5650
-
SHA512
a82b522dfd7eac30292a9e9ab19ddac94563804e77a1090e5f44de7e794ef4e5ebe0e7fb36e5177479417c8176ae0475613700755ca015c7ce941a4740215faa
-
SSDEEP
384:bzIPMepSbSsG/CdPvunCpeJzKoSS3D6JO5LfBqtjbjk4Eohubn3ezta:nIPMecWsGKVunFFRDE6pqjhust
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 WINWORD.EXE Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz WINWORD.EXE Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString WINWORD.EXE -
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS WINWORD.EXE Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily WINWORD.EXE Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU WINWORD.EXE -
Suspicious behavior: AddClipboardFormatListener 2 IoCs
pid Process 2120 WINWORD.EXE 2120 WINWORD.EXE -
Suspicious use of SetWindowsHookEx 10 IoCs
pid Process 2120 WINWORD.EXE 2120 WINWORD.EXE 2120 WINWORD.EXE 2120 WINWORD.EXE 2120 WINWORD.EXE 2120 WINWORD.EXE 2120 WINWORD.EXE 2120 WINWORD.EXE 2120 WINWORD.EXE 2120 WINWORD.EXE
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\virusshare\3\VirusShare_3fb34964fa7b8c6bfad8d960380ff04e.doc" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:2120