General
-
Target
vmzeus_3.3.6.0.vir
-
Size
277KB
-
Sample
200719-g1mr5x1ytn
-
MD5
ec3bc944c4c8844d63acdba9e36e67c9
-
SHA1
01a74db6a1c8d2064de42c73555d2a3644dc369a
-
SHA256
bf63837b5da7be5191e1c0b79a827ce8649971297f355845ae968cc44c7d9162
-
SHA512
7fb8b88ad47525b284aa005a1b3045c89fd424eece83b599d4271ebc2499cae5a32e642df04427548ea9e33183b2829c04d6e1a3fc287aff6ac9d6d96648e660
Static task
static1
Behavioral task
behavioral1
Sample
vmzeus_3.3.6.0.vir.exe
Resource
win7
Behavioral task
behavioral2
Sample
vmzeus_3.3.6.0.vir.exe
Resource
win10v200430
Malware Config
Targets
-
-
Target
vmzeus_3.3.6.0.vir
-
Size
277KB
-
MD5
ec3bc944c4c8844d63acdba9e36e67c9
-
SHA1
01a74db6a1c8d2064de42c73555d2a3644dc369a
-
SHA256
bf63837b5da7be5191e1c0b79a827ce8649971297f355845ae968cc44c7d9162
-
SHA512
7fb8b88ad47525b284aa005a1b3045c89fd424eece83b599d4271ebc2499cae5a32e642df04427548ea9e33183b2829c04d6e1a3fc287aff6ac9d6d96648e660
Score8/10-
Executes dropped EXE
-
Deletes itself
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Loads dropped DLL
-
Adds Run key to start application
-