Overview

overview

10

Static

static

10

source_prepared.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    source_prepared.exe

  • Size

    107.2MB

  • Sample

    241119-2qapjayren

  • MD5

    c44f72d5864ca3879b88de331730ec71

  • SHA1

    11d44c7875c1d2b09540971a2b48005723eb9168

  • SHA256

    fe186003a0c410354bcb81306a311d11e5162a30ff0aa9cece105e0913ad419a

  • SHA512

    f9d9a9e48c97c1be864378a5e8b85a4fcbe141a8b02dbd3d1120cad6c65b03284cffc7c53551d52155b1d7855419bf080306623c94abceb9a6abbd81e1b7d98b

  • SSDEEP

    3145728:lUWr7RS6xjKcBa6/2qHO5iFpBnG0iWMstB2OxQbyKt:eAFSWNa6NHCibhieB

Score
10/10
pysilonexecutionpyinstaller

Malware Config

Targets

    • Target

      source_prepared.exe

    • Size

      107.2MB

    • MD5

      c44f72d5864ca3879b88de331730ec71

    • SHA1

      11d44c7875c1d2b09540971a2b48005723eb9168

    • SHA256

      fe186003a0c410354bcb81306a311d11e5162a30ff0aa9cece105e0913ad419a

    • SHA512

      f9d9a9e48c97c1be864378a5e8b85a4fcbe141a8b02dbd3d1120cad6c65b03284cffc7c53551d52155b1d7855419bf080306623c94abceb9a6abbd81e1b7d98b

    • SSDEEP

      3145728:lUWr7RS6xjKcBa6/2qHO5iFpBnG0iWMstB2OxQbyKt:eAFSWNa6NHCibhieB

    Score
    9/10
    execution

    • Enumerates VirtualBox DLL files

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

      execution

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks