General
- Target viruis.exe
- Size 10.9MB
- Sample260710-163jtacv2k
- SHA256 97a5331c3f549fa172332132cd8642e5edc2ace740da6ea79be57d8ffe96be70
- MD5 3a188678f88383b72af7ede513736817
- SHA1 273b2547f813ed7901340a0d4d33d40fc74802eb
- SHA512 0263f2b30020489c1bd0ae7506dd80ffe5e9afcbd4766188a0ca4932d8195b66df46c9c258ef11210da13239290d2e240a291bc03f6672cdfdfc713bcb17fb4c
- SSDEEP 196608:kqorAExrKX1ItbW897GLPHMe81SF2RPUewLeuk6tKZ2LPHsMRqxbRgFq2SDU:HcFxrKX216PsZg2KeSeXYK4LHsMRqxb2
- TLSH T1F2C63399B7A909A9E86F653F68D48567C3E0B83207A0C9CB1BF04D262E571EDFD30750
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
viruis.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
viruis.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target viruis.exe
- Size 10.9MB
- SHA256 97a5331c3f549fa172332132cd8642e5edc2ace740da6ea79be57d8ffe96be70
- MD5 3a188678f88383b72af7ede513736817
- SHA1 273b2547f813ed7901340a0d4d33d40fc74802eb
- SHA512 0263f2b30020489c1bd0ae7506dd80ffe5e9afcbd4766188a0ca4932d8195b66df46c9c258ef11210da13239290d2e240a291bc03f6672cdfdfc713bcb17fb4c
- SSDEEP 196608:kqorAExrKX1ItbW897GLPHMe81SF2RPUewLeuk6tKZ2LPHsMRqxbRgFq2SDU:HcFxrKX216PsZg2KeSeXYK4LHsMRqxb2
- TLSH T1F2C63399B7A909A9E86F653F68D48567C3E0B83207A0C9CB1BF04D262E571EDFD30750
- MD5 SHA1 SHA512 SSDEEP TLSH
Credentials from Password Stores: Windows Credential Manager
Suspicious access to Credentials History.
Loads dropped DLL
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1