General

  • Target

    Oracle_VM_VirtualBox_Extension_Pack-7.0.8.vbox-extpack

  • Size

    17.8MB

  • MD5

    1f57a7f2e58592f9a6c9d9006379d1a0

  • SHA1

    07ddfddb8a837fdcb4f19c20a22239a77195ccf3

  • SHA256

    452320f3b1da42b30c32ea5ab5887983b575638ceb4e3beacfefbbb3b0510a48

  • SHA512

    a128ebb9e318a7bfb0ff54902bc4e93cbdfbe4469921db30e45631ffc5c35c5f489a88efa1c1eb9fcc44abcbfc46bd0746b2f4a0c61f344a49b34890834d6e31

  • SSDEEP

    393216:daU4caFJs2BxeRZ6NiNgNpcvoC6zpzs2w3iM4noxqi7vlBmtjbHaoJ/fDPd:dIFu2BxY4Ndkr6zpjDMXxNl8jb7/fp

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Oracle_VM_VirtualBox_Extension_Pack-7.0.8.vbox-extpack
    .gz
  • sample
    .tar
  • ExtPack-license.html
    .html
  • ExtPack-license.rtf
    .rtf
  • ExtPack-license.txt
  • ExtPack.manifest
  • ExtPack.signature
  • ExtPack.xml
    .xml
  • PXE-Intel.rom
  • darwin.amd64/VBoxHostWebcam.dylib
    .macho macos
  • darwin.amd64/VBoxNvmeR0.r0
    .macho macos
  • darwin.amd64/VBoxNvmeR3.dylib
    .macho macos
  • darwin.amd64/VBoxPuelCrypto.dylib
    .macho macos
  • darwin.amd64/VBoxPuelMain.dylib
    .macho macos
  • darwin.amd64/VBoxPuelMainVM.dylib
    .macho macos
  • darwin.amd64/VBoxUsbCardReaderR3.dylib
    .macho macos
  • darwin.amd64/VBoxUsbWebcamR3.dylib
    .macho macos
  • darwin.amd64/VBoxVRDP.dylib
    .macho macos
  • darwin.amd64/VDPluginCrypt.dylib
    .macho macos
  • darwin.arm64/VBoxNvmeR3.dylib
    .macho macos
  • darwin.arm64/VBoxPuelCrypto.dylib
    .macho macos
  • darwin.arm64/VBoxPuelMain.dylib
    .macho macos
  • darwin.arm64/VBoxPuelMainVM.dylib
    .macho macos
  • darwin.arm64/VBoxUsbCardReaderR3.dylib
    .macho macos
  • darwin.arm64/VBoxUsbWebcamR3.dylib
    .macho macos
  • darwin.arm64/VBoxVRDP.dylib
    .macho macos
  • darwin.arm64/VDPluginCrypt.dylib
    .macho macos
  • linux.amd64/VBoxHostWebcam.so
    .elf linux x64
  • linux.amd64/VBoxNvmeR0.r0
    .elf linux x64
  • linux.amd64/VBoxNvmeR3.so
    .elf linux x64
  • linux.amd64/VBoxPuelCrypto.so
    .elf linux x64
  • linux.amd64/VBoxPuelMain.so
    .elf linux x64
  • linux.amd64/VBoxPuelMainVM.so
    .elf linux x64
  • linux.amd64/VBoxUsbCardReaderR3.so
    .elf linux x64
  • linux.amd64/VBoxUsbWebcamR3.so
    .elf linux x64
  • linux.amd64/VBoxVRDP.so
    .elf linux x64
  • linux.amd64/VDPluginCrypt.so
    .elf linux x64
  • solaris.amd64/VBoxHostWebcam.so
    .elf linux x64
  • solaris.amd64/VBoxNvmeR0.r0
    .elf linux x64
  • solaris.amd64/VBoxNvmeR3.so
    .elf linux x64
  • solaris.amd64/VBoxPuelCrypto.so
    .elf linux x64
  • solaris.amd64/VBoxPuelMain.so
    .elf linux x64
  • solaris.amd64/VBoxPuelMainVM.so
    .elf linux x64
  • solaris.amd64/VBoxUsbCardReaderR3.so
    .elf linux x64
  • solaris.amd64/VBoxUsbWebcamR3.so
    .elf linux x64
  • solaris.amd64/VBoxVRDP.so
    .elf linux x64
  • solaris.amd64/VDPluginCrypt.so
    .elf linux x64
  • win.amd64/VBoxExtPackPuel.inf
  • win.amd64/VBoxHostWebcam.dll
    .dll windows x64

    270bd663ee39ee9234e754958d09abac


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • win.amd64/VBoxNvmeR0.r0
    .exe windows x64

    6a756423db02f0014d7ac747a93259b6


    Headers

    Imports

    Exports

    Sections

  • win.amd64/VBoxNvmeR3.dll
    .dll windows x64

    068dd613766dbaf64e0a91026aca1866


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • win.amd64/VBoxPuelCrypto.dll
    .dll windows x64

    72e5c3ccbc08eee605dc7a04d423ecfe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • win.amd64/VBoxPuelMain.dll
    .dll windows x64

    35e6bb0a296b01c465d887a92f1f24d9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • win.amd64/VBoxPuelMainVM.dll
    .dll windows x64

    b1151b4fb8e2fdc32b411bd96391eb59


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • win.amd64/VBoxUsbCardReaderR3.dll
    .dll windows x64

    bd1e4a4f38e882d6b69ffcf3ae02c386


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • win.amd64/VBoxUsbWebcamR3.dll
    .dll windows x64

    7147c881398313aa6abe0166f7a1d481


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • win.amd64/VBoxVRDP.dll
    .dll windows x64

    6353985de95d7b18ff9e1ecdd5cbb3e9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • win.amd64/VDPluginCrypt.dll
    .dll windows x64

    ea57c0ce1f60ef1efa71b6ab696c280e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • win.amd64/vboxextpackpuel.cat