Overview

overview

10

Static

static

10

gorebox1.exe

windows10-ltsc 2021-x64

9

Resubmissions

02-12-2024 08:47

241202-kpztlaxqgv 10

02-12-2024 08:45

241202-knwesaxqcw 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    gorebox1.exe

  • Size

    75.8MB

  • Sample

    241202-knwesaxqcw

  • MD5

    cfd7d111b734848dd2142b308f701de8

  • SHA1

    f1157328b7ba86c78634ad3b594fa2b10f36f44d

  • SHA256

    715398e5246fe87b96181a79e092548dfa8dc43eef87259b7b1f0ec51ce4af99

  • SHA512

    2709f752cc0dc685b8a701d76a2b2f009db1c2a585d7f0ae4cb1a2f9997671adb9d1fe03d37231e68bf7bb846bf0ee265504ef16a7a29fb11d763973b0df1cb4

  • SSDEEP

    1572864:M7Vl8WKomcSk8IpG7V+VPhqSvE7WIMlKNciY4MHHLeqPNLtD51kUZW6GoNk:MJinomcSkB05awStIMMVMHVLt11DtGo

Score
10/10
pysilonevasionexecutionpersistencepyinstallerupx

Malware Config

Targets

    • Target

      gorebox1.exe

    • Size

      75.8MB

    • MD5

      cfd7d111b734848dd2142b308f701de8

    • SHA1

      f1157328b7ba86c78634ad3b594fa2b10f36f44d

    • SHA256

      715398e5246fe87b96181a79e092548dfa8dc43eef87259b7b1f0ec51ce4af99

    • SHA512

      2709f752cc0dc685b8a701d76a2b2f009db1c2a585d7f0ae4cb1a2f9997671adb9d1fe03d37231e68bf7bb846bf0ee265504ef16a7a29fb11d763973b0df1cb4

    • SSDEEP

      1572864:M7Vl8WKomcSk8IpG7V+VPhqSvE7WIMlKNciY4MHHLeqPNLtD51kUZW6GoNk:MJinomcSkB05awStIMMVMHVLt11DtGo

    Score
    9/10
    evasionexecutionpersistenceupx

    • Enumerates VirtualBox DLL files

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

      execution

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Legitimate hosting services abused for malware hosting/C2

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks