AI
Credit card phishing and persistence malware
Local reference
Suspicious dependency
Inferred
Mal-ecule
O₃(CaP₂As)H₆(Cm₂DbF₂Os₅Po₅U)Md₄(Bi₃Pt)Th
Card verification phishing resource set: virussign.com_8bb7b3e58853bcaf470629c5dc84d9c0.vir:0xab11
Shell service COM hijack persistence: virussign.com_8bb7b3e58853bcaf470629c5dc84d9c0.vir:0xb36c
ATM PIN prompt in PE resource: virussign.com_8bb7b3e58853bcaf470629c5dc84d9c0.vir:0xab11
| 0x3c0 | 00000000000000000000000000000000 | ................ |
| 0x3d0 | 00000000000000000000000000000000 | ................ |
| 0x3e0 | 00000000000000000000000000000000 | ................ |
| 0x3f0 | 00000000000000000000000000000000 | ................ |
| 0x400 | 2af459db57101da75a301f501b346d5f | *.Y.W...Z0.P.4m_ |
| 0x410 | 90703d5890603d409236a1531b341993 | .p=X.`=@.6.S.4.. |
| 0x420 | 48624edb5f10090071ca71500b741934 | HbN._...q.qP.t.4 |
| 0x430 | e40119501b347dd93e3419501bbf5d74 | ...P.4}.>4.P..]t |
| 0x440 | 3bbf4158904415d3e5cb6d7020403d74 | ;.AX.D....mp @=t |
| 0x450 | 6f2e94646dbf15e390783d58907c15d3 | o..dm....x=X.|.. |
| 0x460 | 67871d506ee3e604a83cf2817fbb1c50 | g..Pn....<.....P |
| 0x470 | 1b3419d3df38460e40f74cd9fe674f07 | .4...8F.@.L..gO. |
| 0x480 | 4e5e193a1b5c8b405b34e62513dcaf2a | N^.:.\.@[4.%...* |
| 0x490 | 1b34440f456f90bc46f7e50592d19abc | .4D.Eo..F....... |
| 0x4a0 | 13674f074ebf445c907111f39784 | .gO.N.D\.q.... |
| 0x83c0 | 00000000000000000000000000000000 | ................ |
| 0x83d0 | 00000000000000000000000000000000 | ................ |
| 0x83e0 | 00000000000000000000000000000000 | ................ |
| 0x83f0 | 00000000000000000000000000000000 | ................ |
| 0x8400 | cfdfce667feccc66cfcf8e66cf4f8e66 | ...f...f...f.O.f |
| 0x8410 | cf4f8e66cf4f8e66cf4f8e66cf4f8e66 | .O.f.O.f.O.f.O.f |
| 0x8420 | cf4f8e66cf4f8e66cf4f8e66cf4f8e66 | .O.f.O.f.O.f.O.f |
| 0x8430 | cf4f8e66cf4f8e66cf4f8e66cf4f8e66 | .O.f.O.f.O.f.O.f |
| 0x8440 | cf4f8e66cf4f8e66cf4f8e66cf4f8e66 | .O.f.O.f.O.f.O.f |
| 0x8450 | cf4f8e66cf4f8e66cf4f8e66cf4f8e66 | .O.f.O.f.O.f.O.f |
| 0x8460 | cf4f8e66cf4f8e66cf4f8e66cf4f8e66 | .O.f.O.f.O.f.O.f |
| 0x8470 | cf4f8e66cf4f8e66cf4f8e66cf4f8e66 | .O.f.O.f.O.f.O.f |
| 0x8480 | cf4f8e66cf4f8e66cf4f8e66cf4f8e66 | .O.f.O.f.O.f.O.f |
| 0x8490 | cf4f8e668426e001842efc12a021d157 | .O.f.&.......!.W |
| 0x84a0 | ff4f | .O |
| 0xa9c4 | cf4f8e66cf4f8e66cf4f8e66cf4f8e66 | .O.f.O.f.O.f.O.f |
| 0xa9d4 | cf4f8e66cf4f8e66cf4f8e66cf4f8e66 | .O.f.O.f.O.f.O.f |
| 0xa9e4 | cf4f8e66cf4f8e66cf4f8e66cf4f8e66 | .O.f.O.f.O.f.O.f |
| 0xa9f4 | cf4f8e66cf4f8e66cf4f8e66cf4f8e66 | .O.f.O.f.O.f.O.f |
| 0xaa04 | 9b27e715ef04cb31836fdd329a09c846 | .'.....1.o.2...F |
| 0xaa14 | b82efd46ac20ea03ab6fec1fef19a046 | ...F. ...o.....F |
| 0xaa24 | 9961ae369a1fc52f8163ae0ba02beb14 | .a.6.../.c...+.. |
| 0xaa34 | ae3be114ef20e846ac3dfb12a03fa008 | .;... .F.=...?.. |
| 0xaa44 | ba4fd903a32ce10baa6ffa09ef20fb14 | .O...,...o... .. |
| 0xaa54 | ef29e114ba22a2468e2bfb0abb6fd903 | .)...".F.+...o.. |
| 0xaa64 | ad6fc307bc3beb14bc6eae0ebb3bfe5c | .o...;...n...;.\ |
| 0xaa74 | e060ed14ba3be116e121fb668e18c34a | .`...;...!.f...J |
| 0xaa84 | ef38eb0aac20e303ef3be1468c1ddb32 | .8... ...;.F...2 |
| 0xaa94 | 801fa0289a6fa346870edc228c00dc23 | ...(.o.F..."...# |
| 0xaaa4 | e00cc1289b0ac032e00cc62f830bae36 | ...(...2.../...6 |
| 0xaab4 | 801dc029e003c12a861bcf35e01dcf36 | ...)...*...5...6 |
| 0xaac4 | 8a4fdc238e03ae258e1cc64aef1dcb27 | .O.#...%...J...' |
| 0xaad4 | 836fcc2f9b0cc623956fa3468c1ddb32 | .o./...#.o.F...2 |
| 0xaae4 | 801fa0289a4f8e66cf4fc708ac20fc14 | ...(.O.f.O... .. |
| 0xaaf4 | aa2cfa468e1bc3469f06c04aef3fe203 | .,.F...F...J.?.. |
| 0xab04 | ae3ceb4aef2ce114bd2aed12cf1fe203 | .<.J.,...*......Card verification phishing resource set |
| 0xab14 | ae3ceb4aef2ae012aa3dae1fa03afc46 | .<.J.*...=...:.F |
| 0xab24 | 8e1bc3469f06c0668621ed09bd3deb05 | ...F...f.!...=.. |
| 0xab34 | bb6fcd30997dae4efc62ea0fa826fa46 | .o.0.}.N.b...&.F |
| 0xab44 | ac20ea03ef20e046ad2eed0def20e846 | . ... .F..... .F |
| 0xab54 | ac2efc02e663ae16a32aef15aa63ae05 | .....c...*...c.. |
| 0xab64 | a03dfc03ac3b8e36a32aef15aa63ae03 | .=...;.6.*...c..CVV2 prompt in PE resource |
| 0xab74 | a13beb14ef36e113bd6fcd30997dae4e | .;...6...o.0.}.N |
| 0xab84 | fc62ea0fa826fa46ac20ea03ef20e046 | .b...&.F. ... .F |
| 0xab94 | ad2eed0def20e846ac2efc02e64fab15 | ..... .F.....O.. |
| 0xaba4 | e26afd669f23eb07bc2aa246bc2ae203 | .j.f.#...*.F.*.. |
| 0xabb4 | ac3bae23b73fe714ae3be709a16fd703 | .;.#.?...;...o.. |
| 0xabc4 | ae3d8e36a32aef15aa63ae15aa23eb05 | .=.6.*...c...#.. |
| 0xabd4 | bb6fcb1ebf26fc07bb26e108ef02e108 | .o...&...&...... |
| 0xabe4 | bb278e2fa12ce114bd2aed12ef0cef14 | .'./.,...*...... |
| 0xabf4 | ab6fc013a22deb14e36ffe0aaa2efd03 | .o...-...o...... |
| 0xac04 | e36fed09bd3deb05bb4fde0aaa2efd03 | .o...=...O......Card number prompt in PE resource |
| 0xac14 | e36feb08bb2afc46b620fb14ef0cef14 | .o...*.F. ...... |
| 0xac24 | ab6fc013a22deb14cf6afd46ea3c8e36 | .o...-...j.F.<.6 |
| 0xac34 | a32aef15aa63ae03a13beb14ef2ce114 | .*...c...;...,.. |
| 0xac44 | bd2aed12ef09fb0aa36fc007a22a8e36 | .*.......o...*.6 |
| 0xac54 | a32aef15aa63ae15aa23eb05bb6fcd07 | .*...c...#...o.. |
| 0xac64 | bd2bae4e9926fd07e002ef15bb2afc25 | .+.N.&.......*.% |
| 0xac74 | ae3dea4fcf29fc0bfd4fdc03a826fd12 | .=.O.)...O...&.. |
| 0xac84 | aa3ddd03bd39e705aa1ffc09ac2afd15 | .=...9.......*.. |
| 0xac94 | cf24eb14a12ae255fd61ea0aa34ffd13 | .$...*.U.a...O.. |
| 0xaca4 | bd29a002ae3b8e02a124e548ab23e266 | .)...;...$.H.#.f |
| 0xacb4 | a424bd54e139f602cf24e555fd61ea0a | .$.T.9...$.U.a.. |
| 0xb061 | 6fa34bf14fa448e54fd64ba024dc03ac | o.K.O.H.O.K.$... |
| 0xb071 | 39bf57cf06cb20bd2ee303cf6afd43ba | 9.W... .....j.C. |
| 0xb081 | 6fa3468226ed14a03ce100bb6fc708bb | o.F.&...<...o... |
| 0xb091 | 2afc08aa3bae23b73fe209bd2afc6693 | *...;.#.?...*.f. |
| 0xb0a1 | 06eb1ebf23e114aa61eb1eaa6f8e36ae | ....#...a...o.6. |
| 0xb0b1 | 3be6669c20e812b82efc039302e705bd | ;.f. ........... |
| 0xb0c1 | 20fd09a93bd22f8a6fdd03bb3afe3a9c | ...;./.o...:.:. |
| 0xb0d1 | 2afa13bf4ff703bc4fcc14a038fd0381 | *...O...O...8... |
| 0xb0e1 | 2af936bd20ed03bc3c8e488b0ac8279a | *.6. ...<.H...'. |
| 0xb0f1 | 03da3a9c00c832980edc239302e705bd | ..:...2...#..... |
| 0xb101 | 20fd09a93bd231a621ea09b83cd225ba | ...;.1.!...<.%. |
| 0xb111 | 3dfc03a13bd803bd3ce709a113cb1ebf | =...;...<....... |
| 0xb121 | 23e114aa3dd224bd20f915aa01eb119f | #...=.$. ....... |
| 0xb131 | 3de105aa3cfd668823e104ae23db15aa | =...<.f.#...#... |
| 0xb141 | 3dc100a923e708aa4fdd09a93bf907bd | =...#...O...;... |
| 0xb151 | 2ad22ba62cfc09bc20e8129318e708ab | *.+.,... ....... |
| 0xb161 | 20f915930cfb14bd2ae012992afc15a6 | .......*...*... |
| 0xb171 | 20e03a8621fa03bd21eb12ef1ceb12bb | .:.!...!....... |
| 0xb181 | 26e001bc4fbf50ff7e8e358009da318e | &...O.P.~.5...1. |
| 0xb191 | 1dcb3a8226ed14a03ce100bb13d90fa1 | ..:.&...<....... |
| 0xb1a1 | 2be111bc13cd13bd3deb08bb19eb14bc | +.......=....... |
| 0xb1b1 | 26e1089306e012aa3de003bb6fdd03bb | &.......=...o... |
| 0xb1c1 | 3be708a83cd23ca021eb15936afb66f3 | ;...<.<.!...j.f. |
| 0xb1d1 | 60ec09ab36b05aa73be30af14fb249bc | `...6.Z.;...O.I. |
| 0xb1e1 | 2cfc0fbf3bb066ea3cfd03bb1be70baa | ,...;.f.<....... |
| 0xb1f1 | 20fb12e76df44ee66da243ba66b566b2 | ...m.N.m.C.f.f. |
| 0xb201 | 4fab15ab20ed13a22ae012e16afd48bc | O... ...*...j.H. |
| 0xb211 | 3aec0ba63ba64ff44ff566a93ae005bb | :...;.O.O.f.:... |
| 0xb221 | 26e108ef35a64fcf73fd05bd26fe12f1 | &...5.O.s...&... |
| 0xb231 | 4fb249a920fc0bf14fb20fa13ffb12ef | O.I. ...O...?... |
| 0xb241 | 3bf716aa72ac15ba2de30fbb6dae10ae | ;...r...-...m... |
| 0xb251 | 23fb03f268a958cf6afd1acf69e004bc | #...h.X.j...i... |
| 0xb261 | 3fb566ea3cb20fa13ffb12ef3bf716aa | ?.f.<...?...;... |
| 0xb271 | 72ac03ab26fa44ef39ef0aba2ab341ea | r...&.D.9...*.A. |
| 0xb281 | 3ca946a12ee303f268ab15ea3aa958f3 | <.F.....h...:.X. |
| 0xb291 | 2dfc58c2458e0fab4fab15f326e016ba | -.X.E...O...&... |
| 0xb2a1 | 3bae12b63feb5bed2aea0fbb6dae10ae | ;...?.[.*...m... |
| 0xb2b1 | 23fb03f268ab15e86fe007a22ab341ea | #...h...o...*.A. |
| 0xb2c1 | 3ca958f32dfc58c2458e5aad3db066ea | <.X.-.X.E.Z.=.f. |
| 0xb2d1 | 3cb200a03de346ae2cfa0fa021b344ea | <...=.F.,...!.D. |
| 0xb2e1 | 3cac46a22afa0ea02bb3449f00dd32ed | <.F.*...+.D...2. |
| 0xb2f1 | 6fe007a22ab344ea3cac58cf29ab48fc | o...*.D.<.X.).H. |
| 0xb301 | 3a8e5aad20ea1ff14fb249a72aef02f1 | :.Z. ...O.I.*... |
| 0xb311 | 4fc30fac3de135a029fa4b8c20fc16cf | O...=.5.).K. ... |
| 0xb321 | 6afd5abb26fa0aaa71ab15ea3ab249bb | j.Z.&...q...:.I. |
| 0xb331 | 26fa0aaa718e5aa72aef02f14fab15f3 | &...q.Z.*...O... |
| 0xb341 | 6ea34bef6aa054ba6fa34bf14fb20ebb | n.K.j.T.o.K.O... |
| 0xb351 | 22e258cf61e612a24fab15ea2cab05cf | ".X.a...O...,... |
| 0xc06a | 726f7957696e646f770056004d6f7665 | royWindow.V.Move |
| 0xc07a | 57696e646f77000000005b0044656657 | Window....[.DefW |
| 0xc08a | 696e646f7750726f6341000000005d00 | indowProcA....]. |
| 0xc09a | 43616c6c57696e646f7750726f634100 | CallWindowProcA. |
| 0xc0aa | 0000890047657453746f636b4f626a65 | ....GetStockObje |
| 0xc0ba | 637400000000ca00536574426b436f6c | ct......SetBkCol |
| 0xc0ca | 6f7200000000dd005365745465787443 | or......SetTextC |
| 0xc0da | 6f6c6f720000fa004372656174654272 | olor....CreateBr |
| 0xc0ea | 757368496e6469726563740000001c00 | ushIndirect..... |
| 0xc0fa | 437265617465466f6e74410000008700 | CreateFontA..... |
| 0xc10a | 476574557365724e616d654100007101 | GetUserNameA..q. |
| 0xc11a | 5265674372656174654b657945784100 | RegCreateKeyExA.Shell service COM hijack persistence |
| 0xc12a | 00007401526567436c6f73654b657900 | ..t.RegCloseKey. |
| 0xc13a | 000079015265674f70656e4b65794578 | ..y.RegOpenKeyEx |
| 0xc14a | 41008401526567517565727956616c75 | A...RegQueryValu |
| 0xc15a | 65457841000090015265675365745661 | eExA....RegSetVa |
| 0xc16a | 6c756545784100000000ca0147657453 | lueExA......GetS |
| 0xc17a | 65637572697479496e666f000000cd01 | ecurityInfo..... |
| 0xc18a | 5365745365637572697479496e666f00 | SetSecurityInfo. |
| 0xc19a | 0000d401536574456e7472696573496e | ....SetEntriesIn |
| 0xc1aa | 41636c41000018005f5f4765744d6169 | AclA....__GetMai |
| 0xc1ba | 6e417267730081015f736c6565700000 | nArgs..._sleep.. |
| 0xc1ca | 0000a6015f73747269636d700000fe01 | ...._stricmp.... |
| 0xc1da | 61746f6900000a026578697400005402 | atoi....exit..T. |
| 0xc1ea | 6d656d6370790000000056026d656d73 | memcpy....V.mems |
| 0xc1fa | 6574000000005b027072696e74660000 | et....[.printf.. |
| 0xc20a | 00006002726169736500610272616e64 | ..`.raise.a.rand |
| 0xc21a | 00006a027369676e616c000000006d | ..j.signal....m |
Objectives
Micro-behaviors
Metadata
Third-party
notable severity, 90% confident.
SigBase/SUSP/Imphash
Detects imphash often found in malware samples (Zero hits with with search for 'imphash:x p:0' on Virustotal)
20 of 28 traits shown
Identity
| SHA-256 | 8e61454911e47c1d35c4d9eb3e11a0d7d7742e7a449d8925d510ec8b74ba9b34 |
|---|---|
| Filename | virussign.com_8bb7b3e58853bcaf470629c5dc84d9c0.vir |
| Package | 8e61454911e47c1d35c4d9eb3e11a0d7d7742e7a449d8925d510ec8b74ba9b34 |
Origin
| Source | harvest |
|---|---|
| Feed | virussign |
| Domain | virussign.com |
Timeline
| First seen | 7 Aug 2026 13:14 UTC |
|---|---|
| First analyzed | 7 Aug 2026 23:21 UTC |
| Last analyzed | 7 Aug 2026 23:21 UTC |
| Last updated | 7 Aug 2026 23:21 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | harvest |
| Traits version | 46d16 |
Not seeing what you expected? Let us know