General

  • Target

    Oracle_VM_VirtualBox_Extension_Pack-7.0.20.vbox-extpack

  • Size

    17.4MB

  • MD5

    9a85012cc2a3f86789c58578458b016c

  • SHA1

    41dd3a41c758b7d17ab23b4a5da34b4094e3bb9d

  • SHA256

    d750fb17688d70e0cb2d7b06f1ad3a661303793f4d1ac39cfa9a54806b89da25

  • SHA512

    b0ba22299a9bb81f47fb4c7f4117b1b5210a72973da723185c6d87fe192f7ab0ea0eb9fae6671b84332a234ead8539375976c87c483628449812e617c42598c7

  • SSDEEP

    393216:hYOdIR52LuC/K3QzbKzb2fWso/fpvEb6sHWlrkljZTyKYMbokg/NRH:hDg5yC3suzboWso/fp062WlS0KYMlglt

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Oracle_VM_VirtualBox_Extension_Pack-7.0.20.vbox-extpack
    .gz
  • sample
    .tar
  • ExtPack-license.html
    .html
  • ExtPack-license.rtf
    .rtf
  • ExtPack-license.txt
  • ExtPack.manifest
  • ExtPack.signature
  • ExtPack.xml
    .xml
  • PXE-Intel.rom
  • darwin.amd64/VBoxHostWebcam.dylib
    .dylib macos arch:x64
  • darwin.amd64/VBoxNvmeR0.r0
    .macho macos arch:x64
  • darwin.amd64/VBoxNvmeR3.dylib
    .dylib macos arch:x64
  • darwin.amd64/VBoxPuelCrypto.dylib
    .dylib macos arch:x64
  • darwin.amd64/VBoxPuelMain.dylib
    .dylib macos arch:x64
  • darwin.amd64/VBoxPuelMainVM.dylib
    .dylib macos arch:x64
  • darwin.amd64/VBoxUsbCardReaderR3.dylib
    .dylib macos arch:x64
  • darwin.amd64/VBoxUsbWebcamR3.dylib
    .dylib macos arch:x64
  • darwin.amd64/VBoxVRDP.dylib
    .dylib macos arch:x64
  • darwin.amd64/VDPluginCrypt.dylib
    .dylib macos arch:x64
  • darwin.arm64/VBoxNvmeR3.dylib
    .dylib macos arch:arm64
  • darwin.arm64/VBoxPuelCrypto.dylib
    .dylib macos arch:arm64
  • darwin.arm64/VBoxPuelMain.dylib
    .dylib macos arch:arm64
  • darwin.arm64/VBoxPuelMainVM.dylib
    .dylib macos arch:arm64
  • darwin.arm64/VBoxUsbCardReaderR3.dylib
    .dylib macos arch:arm64
  • darwin.arm64/VBoxUsbWebcamR3.dylib
    .dylib macos arch:arm64
  • darwin.arm64/VBoxVRDP.dylib
    .dylib macos arch:arm64
  • darwin.arm64/VDPluginCrypt.dylib
    .dylib macos arch:arm64
  • linux.amd64/VBoxHostWebcam.so
    .elf linux x64
  • linux.amd64/VBoxNvmeR0.r0
    .elf linux x64
  • linux.amd64/VBoxNvmeR3.so
    .elf linux x64
  • linux.amd64/VBoxPuelCrypto.so
    .elf linux x64
  • linux.amd64/VBoxPuelMain.so
    .elf linux x64
  • linux.amd64/VBoxPuelMainVM.so
    .elf linux x64
  • linux.amd64/VBoxUsbCardReaderR3.so
    .elf linux x64
  • linux.amd64/VBoxUsbWebcamR3.so
    .elf linux x64
  • linux.amd64/VBoxVRDP.so
    .elf linux x64
  • linux.amd64/VDPluginCrypt.so
    .elf linux x64
  • solaris.amd64/VBoxHostWebcam.so
    .elf linux x64
  • solaris.amd64/VBoxNvmeR0.r0
    .elf linux x64
  • solaris.amd64/VBoxNvmeR3.so
    .elf linux x64
  • solaris.amd64/VBoxPuelCrypto.so
    .elf linux x64
  • solaris.amd64/VBoxPuelMain.so
    .elf linux x64
  • solaris.amd64/VBoxPuelMainVM.so
    .elf linux x64
  • solaris.amd64/VBoxUsbCardReaderR3.so
    .elf linux x64
  • solaris.amd64/VBoxUsbWebcamR3.so
    .elf linux x64
  • solaris.amd64/VBoxVRDP.so
    .elf linux x64
  • solaris.amd64/VDPluginCrypt.so
    .elf linux x64
  • win.amd64/VBoxExtPackPuel.inf
  • win.amd64/VBoxHostWebcam.dll
    .dll windows:6 windows x64 arch:x64

    270bd663ee39ee9234e754958d09abac


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • win.amd64/VBoxNvmeR0.r0
    .sys windows:6 windows x64 arch:x64

    6a756423db02f0014d7ac747a93259b6


    Headers

    Imports

    Exports

    Sections

  • win.amd64/VBoxNvmeR3.dll
    .dll windows:6 windows x64 arch:x64

    068dd613766dbaf64e0a91026aca1866


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • win.amd64/VBoxPuelCrypto.dll
    .dll windows:6 windows x64 arch:x64

    72e5c3ccbc08eee605dc7a04d423ecfe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • win.amd64/VBoxPuelMain.dll
    .dll windows:6 windows x64 arch:x64

    7f4d38254567c3efbe4cadf4efa223cb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • win.amd64/VBoxPuelMainVM.dll
    .dll windows:6 windows x64 arch:x64

    b1151b4fb8e2fdc32b411bd96391eb59


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • win.amd64/VBoxUsbCardReaderR3.dll
    .dll windows:6 windows x64 arch:x64

    bd1e4a4f38e882d6b69ffcf3ae02c386


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • win.amd64/VBoxUsbWebcamR3.dll
    .dll windows:6 windows x64 arch:x64

    7147c881398313aa6abe0166f7a1d481


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • win.amd64/VBoxVRDP.dll
    .dll windows:6 windows x64 arch:x64

    6353985de95d7b18ff9e1ecdd5cbb3e9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • win.amd64/VDPluginCrypt.dll
    .dll windows:6 windows x64 arch:x64

    ea57c0ce1f60ef1efa71b6ab696c280e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • win.amd64/vboxextpackpuel.cat