General
- Target Himlaya.exe
- Size 7.9MB
- Sample241030-svjcssvmfv
- SHA256 4117707c37c95adb3b2610a7406f3814ba37aa1ea396a1a359c3d52a33b01813
Score
10/10
Malware Config
Targets
-
- Target Himlaya.exe
- Size 7.9MB
- SHA256 4117707c37c95adb3b2610a7406f3814ba37aa1ea396a1a359c3d52a33b01813
Score8/10-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
-
Executes dropped EXE
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Enumerates processes with tasklist
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
- Target ��4���.pyc
- Size 1KB
- SHA256 e658010282addadec6a22e2f47285f5da8e09a3894b75135d2ca25afb0ccf7d7
Score1/10