Overview

overview

10

Static

static

10

Plague v2 cracked.7z

windows10-ltsc 2021-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Plague v2 cracked.7z

  • Size

    68.4MB

  • Sample

    241201-tm3l5szpdk

  • MD5

    e108fb2acdd19e1649ff8e6d848ca703

  • SHA1

    ab7821a49a7fc8dc3a69ffaaf693f12e10dd8bfa

  • SHA256

    fc97e0e62e2885a72c28e9dba3022b6ea4def3b3e8ee15445236a3f1792862cd

  • SHA512

    30c3946ce26963ff9cbe96a5a17c1c1c9ebac7aeabd3994ddbf692a1c7a9e3a98a819f04c124d49550caac21fcda9a3aac9029d7648baf2eacc1719e640be06e

  • SSDEEP

    1572864:RlPxzygARujg1eI9ZfCLSbuuyco+TtQYaI+z4SaPKZmfNjlsh:zcN0seI90Sbuuyco+TtmzpaPKWw

Score
10/10
pysilonevasionexecutionpersistencepyinstaller

Malware Config

Targets

    • Target

      Plague v2 cracked.7z

    • Size

      68.4MB

    • MD5

      e108fb2acdd19e1649ff8e6d848ca703

    • SHA1

      ab7821a49a7fc8dc3a69ffaaf693f12e10dd8bfa

    • SHA256

      fc97e0e62e2885a72c28e9dba3022b6ea4def3b3e8ee15445236a3f1792862cd

    • SHA512

      30c3946ce26963ff9cbe96a5a17c1c1c9ebac7aeabd3994ddbf692a1c7a9e3a98a819f04c124d49550caac21fcda9a3aac9029d7648baf2eacc1719e640be06e

    • SSDEEP

      1572864:RlPxzygARujg1eI9ZfCLSbuuyco+TtQYaI+z4SaPKZmfNjlsh:zcN0seI90Sbuuyco+TtmzpaPKWw

    Score
    9/10
    evasionexecutionpersistence

    • Enumerates VirtualBox DLL files

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

      execution

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks