General
- Target virussign.com_62e6c33ebddc9de4a2f56136857b7a00
- Size 738KB
- Sample220713-rnfgwsfbcq
- SHA256 24b97bd8e51250efbf2bd9115924aed5df1c6ca1920c289eb8a340ea78256b30
- MD5 62e6c33ebddc9de4a2f56136857b7a00
- SHA1 c7c762ce627e05c851d9514ae830a550f56c2d03
- SHA512 3d6f27c1be94ea6c00e025ef7104956a871fe4af4690dfbd79e7a258435f91a10b767facc31d140e2a287bf1e315157d763233b1c854fcb254d17fe1e9997c6e
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
virussign.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
virussign.exe
Resource
win10v2004-20220414-en
0 signatures
0 seconds
Malware Config
Targets
-
- Target virussign.com_62e6c33ebddc9de4a2f56136857b7a00
- Size 738KB
- SHA256 24b97bd8e51250efbf2bd9115924aed5df1c6ca1920c289eb8a340ea78256b30
- MD5 62e6c33ebddc9de4a2f56136857b7a00
- SHA1 c7c762ce627e05c851d9514ae830a550f56c2d03
- SHA512 3d6f27c1be94ea6c00e025ef7104956a871fe4af4690dfbd79e7a258435f91a10b767facc31d140e2a287bf1e315157d763233b1c854fcb254d17fe1e9997c6e
- MD5 SHA1 SHA512
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
AutoIT Executable
AutoIT scripts compiled to PE executables.