General
-
Target
source_prepared.exe
-
Size
75.2MB
-
Sample
240420-hrwtlsbb56
-
MD5
5e9134a885c5d8de8aa682f3e7af53ea
-
SHA1
fd191c04d36d587bade2262b044f42c54157e5b7
-
SHA256
88cae9697fe23fa2e469647ba5ebe850561aeb310acbc40c368100e87c92a2ec
-
SHA512
ae1bd4d21601561aed92cc59c8410e11e18fd0345df2903048ce21e02e728e1840bb3c0f39484eaf803b2b4877629a972f47ecfb1e97c34fb48f1511b056174b
-
SSDEEP
1572864:6tiEZjMNSk8IpG7V+VPhqldlL8X5osjx3+iYweyJulZUdgFMWhfbSAFwZvkOYB:6tZZANSkB05awblQtTpuxMgfVwkOm
Behavioral task
behavioral1
Sample
source_prepared.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
source_prepared.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
source_prepared.exe
-
Size
75.2MB
-
MD5
5e9134a885c5d8de8aa682f3e7af53ea
-
SHA1
fd191c04d36d587bade2262b044f42c54157e5b7
-
SHA256
88cae9697fe23fa2e469647ba5ebe850561aeb310acbc40c368100e87c92a2ec
-
SHA512
ae1bd4d21601561aed92cc59c8410e11e18fd0345df2903048ce21e02e728e1840bb3c0f39484eaf803b2b4877629a972f47ecfb1e97c34fb48f1511b056174b
-
SSDEEP
1572864:6tiEZjMNSk8IpG7V+VPhqldlL8X5osjx3+iYweyJulZUdgFMWhfbSAFwZvkOYB:6tZZANSkB05awblQtTpuxMgfVwkOm
Score9/10-
Enumerates VirtualBox DLL files
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Legitimate hosting services abused for malware hosting/C2
-