General
-
Target
X_STOP_SKIDDING.exe
-
Size
80.5MB
-
Sample
240919-yrhvraxfjb
-
MD5
d4a4271250b540003b349e43a0d26f4c
-
SHA1
3bc7799e2ffb7588742633359b8cf35209bb4e76
-
SHA256
94336ccbc2bf47d3d53813a6a84ba5eba80f8f5d10cb145d8cf99e50e737a471
-
SHA512
452afb91a5177915721d117637d7da530b16e8ce94849f9e249af88cf671596b565eb1c1971af5f9ae5f78a3e936c469a87f5e9dd146506f91551365dfa614da
-
SSDEEP
1572864:vvxZQglwWLvZSk8IpG7V+VPhqclE7hlgkiYgj+h58sMw091b4cJzU:vvxZxqGZSkB05awcYeu5Y91bU
Behavioral task
behavioral1
Sample
X_STOP_SKIDDING.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
X_STOP_SKIDDING.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
X_STOP_SKIDDING.exe
-
Size
80.5MB
-
MD5
d4a4271250b540003b349e43a0d26f4c
-
SHA1
3bc7799e2ffb7588742633359b8cf35209bb4e76
-
SHA256
94336ccbc2bf47d3d53813a6a84ba5eba80f8f5d10cb145d8cf99e50e737a471
-
SHA512
452afb91a5177915721d117637d7da530b16e8ce94849f9e249af88cf671596b565eb1c1971af5f9ae5f78a3e936c469a87f5e9dd146506f91551365dfa614da
-
SSDEEP
1572864:vvxZQglwWLvZSk8IpG7V+VPhqclE7hlgkiYgj+h58sMw091b4cJzU:vvxZxqGZSkB05awcYeu5Y91bU
Score9/10-
Enumerates VirtualBox DLL files
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-