Overview

overview

4

Static

static

1

ExtPack-license.html

windows7-x64

3

ExtPack-license.html

windows10-2004-x64

3

ExtPack-license.rtf

windows7-x64

4

ExtPack-license.rtf

windows10-2004-x64

1

darwin.amd....dylib

macos-10.15-amd64

1

darwin.amd...eR0.r0

macos-10.15-amd64

1

darwin.amd....dylib

macos-10.15-amd64

1

darwin.amd....dylib

macos-10.15-amd64

1

darwin.amd....dylib

macos-10.15-amd64

1

darwin.amd....dylib

macos-10.15-amd64

1

darwin.amd....dylib

macos-10.15-amd64

1

darwin.amd....dylib

macos-10.15-amd64

1

darwin.amd....dylib

macos-10.15-amd64

1

darwin.amd....dylib

macos-10.15-amd64

1

darwin.arm....dylib

macos-10.15-amd64

1

darwin.arm....dylib

macos-10.15-amd64

1

darwin.arm....dylib

macos-10.15-amd64

1

darwin.arm....dylib

macos-10.15-amd64

1

darwin.arm....dylib

macos-10.15-amd64

1

darwin.arm....dylib

macos-10.15-amd64

1

darwin.arm....dylib

macos-10.15-amd64

1

darwin.arm....dylib

macos-10.15-amd64

1

darwin.arm....dylib

macos-10.15-amd64

1

linux.amd6...cam.so

ubuntu-24.04-amd64

1

linux.amd6...eR0.r0

ubuntu-24.04-amd64

1

linux.amd6...eR3.so

ubuntu-20.04-amd64

1

linux.amd6...pto.so

ubuntu-24.04-amd64

1

linux.amd6...ain.so

ubuntu-18.04-amd64

1

linux.amd6...nVM.so

ubuntu-24.04-amd64

1

linux.amd6...rR3.so

ubuntu-24.04-amd64

1

linux.amd6...mR3.so

ubuntu-22.04-amd64

1

linux.amd6...RDP.so

ubuntu-24.04-amd64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Oracle_VirtualBox_Extension_Pack-7.1.4.vbox-extpack

  • Size

    21.9MB

  • Sample

    241203-scg21svraq

  • MD5

    b752e1a13502e231ac4aa0e1d91f887c

  • SHA1

    f6a144d5a1217f4c836ecea9b2921fde37f89796

  • SHA256

    9dd60ef3c52c2a318fbbb6faace5862a299b61f678a579988869865dcf7390b6

  • SHA512

    7426c3a3ad11bc2b035b001ac4c364d830384865f486e83255344db0bbdcbb2f7597bd275b88f59f71e21a27481afd03a23f90c0718385fdac11a66bc4bd6a30

  • SSDEEP

    393216:T8qbz35ykDaHpI17PQXRMurhBLPQITNbwGm8DppzCeQVJ1d:oqbrAJI17Uq+nLFm8DpcXd

Score
4/10
discoverylinuxmacos

Malware Config

Targets

    • Target

      ExtPack-license.html

    • Size

      10KB

    • MD5

      e5c315881ceb72a6188cdbda4517ec1e

    • SHA1

      ff3a623e1dcfad6f03e4af51718a2af3e29aa4ad

    • SHA256

      d323942ce5115ec94f0c400818935883865212a7885696d010d00ca51eca5d41

    • SHA512

      6fc81ee5121db08d0ba4950009bab91a8426d022fdf2e390a13d9332f2d5781e3bc52ece47338e538a709cf8843fd1826f9b6540180bbfae3074fc1a3f6c3ace

    • SSDEEP

      192:qLayy8KgvxJI3XThbH+cDlprVjcgd3404ErXC6xoe0yDGpRpP7ixYU:Caz8KgMHTbprVj40rk0DGBGH

    Score
    3/10
    discovery
    behavioral1behavioral2

    • Target

      ExtPack-license.rtf

    • Size

      19KB

    • MD5

      307cd6f1206ca2a3ef0b053a67e460a9

    • SHA1

      d58658149451b56f0b79068d387b776b5405ae8d

    • SHA256

      00e1e8ef63cdd94af6a8971961131a59287e1feddc9a9fb251ac1d06940a49cb

    • SHA512

      0a6e1211ecf915c219a4efdc53558c812573d713c4fa1e81d917d3bdcf5278bd288c46b2ead30c1df115ff7bbbb6f16f15b333979487d35b21180c3566b2210c

    • SSDEEP

      192:wJrjv1M0L/yjpKWDJIT0TyPH7cDcpr5wcgd3+EoXG6xoB0yDGpRpP7irYV:whh/wpK3ITspr5qOoDDGBG4

    Score
    4/10
    discovery
    behavioral3behavioral4

    • Target

      darwin.amd64/VBoxHostWebcam.dylib

    • Size

      531KB

    • MD5

      6ac0552949b7532496db8a960ca9493d

    • SHA1

      fe1b573f10790c5154c19e37f9b074b36bf0a836

    • SHA256

      dcb4c769f76257504e2dae1e75e19c4d5757d425d11534114ccb2d82bb5efad7

    • SHA512

      05d0e81858491f20c5eb2c51c0f889fcb6ea553160dec697815215d018e2af482efc01df8d78b94cd9099be612f8a645277bb52027530731ec2bceade69cdc30

    • SSDEEP

      12288:5sUhMAfDAkaES35a8QWIfGhuBO4yKZjxrA+ukIHN/8syWrazJlb732ym3ASJl:SJ

    Score
    1/10
    behavioral5

    • Target

      darwin.amd64/VBoxNvmeR0.r0

    • Size

      32KB

    • MD5

      882957519d2e3a0237659559b4b52169

    • SHA1

      e68855f007f1500abc0e4497cb35386fb76fa206

    • SHA256

      4b19f6a2ca0d3881fa7a5c677b52fc44fab0a2ba683d29780e58bdc3e39668ab

    • SHA512

      6bf48a784b33a04625471611bc839d103a2298c8469584be6c14f6f10d1300352df083c19e931eb7eea4818b2cd65b06f8c323554c3ca7d4f24d4b6ab7747bb9

    • SSDEEP

      384:hUu2vnnW4jJH9VITtO8E8EFPyrnE9r+Q8frzJrZFmB9PrJhqc/rNab8erKNBy:hUd9jJH9VIsyrED8TFmBVhab85No

    Score
    1/10
    behavioral6

    • Target

      darwin.amd64/VBoxNvmeR3.dylib

    • Size

      73KB

    • MD5

      dd9b3087a6999f2ebf0f25c1ef02f57a

    • SHA1

      5a4ab2f196e8c36862d168d78b0ee33ecbbcb117

    • SHA256

      26bcbe084c1da8e5cd69cd6df374d572f2013635ce0243ae0a24396119b668d5

    • SHA512

      cd907f03119cd2849555c68108dcc7dee91d752e4a671d48ba457a894cb0e7009d565887eba4fa68be72e030d4d9d7a733a3cbbfdf9d3b489f08fdfd512d6175

    • SSDEEP

      768:iM6Avn1MAspN/GJjD+aqbYDazh6p4+AG8jvegg3QwmoT7gxtW5dQBhBd41H9VIG1:/f1a0SJGgFwmo8XBfU04s8Gw5LK

    Score
    1/10
    behavioral7

    • Target

      darwin.amd64/VBoxPuelCrypto.dylib

    • Size

      47KB

    • MD5

      a49a96d7f5002b0bff5021e7fd594615

    • SHA1

      5ac98389581192c670fc409724896d0578ba6b7c

    • SHA256

      9ce4dbf9260ea8bb502f761d83226cea9b08732d3d3c54a2a8aac94e9791f227

    • SHA512

      21be01a11b5bccbe367d31b823ab2070da136a90e304938baefa7acbef3485b6db11b310190e1f4777375aefbcd6507a21166177a3a7aac72cc9a58a9d0d9c43

    • SSDEEP

      384:vM+OTayQomb1gqmCtpJsK7NQRBW40UVVCne22LMr+Q8frzJrZPrePrJhqc/rNabW:vM+OuRgqtUWovLW8TPrghab85

    Score
    1/10
    behavioral8

    • Target

      darwin.amd64/VBoxPuelMain.dylib

    • Size

      6.4MB

    • MD5

      9a61dbf04ddd5b3c342fedf974ec3d4c

    • SHA1

      c3807668d0b0b4edb733c1d246799423668a239f

    • SHA256

      7e4f6874a3d2dd7c5f4656cb0acaba2545e856be067cbae04804b461088a676e

    • SHA512

      776f68f4da4f86e2ca98f756d6d005d7702bd3810a068093c67e6552cf33ce38c52535cf52f2a13c570c29dfe98fc1a05a0f80661c396cd67810322cb84fb668

    • SSDEEP

      49152:kh95+AlX9d8ZFd+UQFa9BcHHLlMbfvwnP9vut3TahNXPZiMwfnC9UCvPJfFCiPpQ:SdX9OdVBBbQRNFacYb

    Score
    1/10
    behavioral9

    • Target

      darwin.amd64/VBoxPuelMainVM.dylib

    • Size

      31KB

    • MD5

      c0b9b1f40600dce4b4827446e3b4344b

    • SHA1

      30f601d48c88711043e7a957b197ec1d96f4b1a3

    • SHA256

      34939482d4aa16bff7d8d5e67f49072a6ac988fe49df0a1e9ca95dfcb4692e07

    • SHA512

      c5126ea86d32c7ef1fa134a7ed1aa268eded3886be1e8917eb070355fa8011ea976714f66bf558436707c7e06ac6253ec442f57ea31ce6db401909aa47de440a

    • SSDEEP

      384:KYx+3l6Cr+Q8frzZrZL/pPrJhqc/rNab8erK:KYqMo8DL/Rhab85

    Score
    1/10
    behavioral10

    • Target

      darwin.amd64/VBoxUsbCardReaderR3.dylib

    • Size

      76KB

    • MD5

      f11a74f10444b22ee5909bd1868e7f14

    • SHA1

      de51782773aec3295340b0f5e541b51ac6a33e79

    • SHA256

      f8db81646b28de2dfccd58bf2bf28c6bcd8963323bbfd6ae6d0c0f5ba9411450

    • SHA512

      534c7f67473c7f2dbae0d434bd9fcbe35328cc041796f756d0ee65bf2737cdd5f6ba17cefacb04c627cf723c590ca06573cbdde12d1fd2e6b235163ef2b11dc2

    • SSDEEP

      1536:+5WXWol+JPqScBCG/3mALfYjIaNU/wBFgpKU:+SW1Sl7YjJEv

    Score
    1/10
    behavioral11

    • Target

      darwin.amd64/VBoxUsbWebcamR3.dylib

    • Size

      77KB

    • MD5

      eb4563d8ab928dc4ed146eb6fdbc392f

    • SHA1

      b7c0eb325dcf837228e5cff662aeffdefeb8e883

    • SHA256

      66be9775e5d393a84d22b05563a621893e9326e5e45c1bfe29fa94b994b63a19

    • SHA512

      d671559605f0ef327aa3858244333a77ed7d4a9cf628d69b5dac903e994d19de04d9540a537a9edee8d8dc7d4eeb9f2e0b36addec047621e6467b017e6d3a86f

    • SSDEEP

      1536:iLIj1a3A5qDRrQea/4hiVLcPfj9Jg+g9K:+h3FOXVIjI

    Score
    1/10
    behavioral12

    • Target

      darwin.amd64/VBoxVRDP.dylib

    • Size

      856KB

    • MD5

      8bffa5f2a171bf016ebabf6f610ca2c4

    • SHA1

      9e945fd27f45b957b746095cac3b29761008017c

    • SHA256

      4ca211e74ba01d63d17363ee93848ffb5721a6ec637020428875281d4e657ff8

    • SHA512

      e068f984af077dfccaddf089852d7d9ecfb1b07da81759b7499b2c01f8b7a53ff84069f19362492da4ce280d3e31cf77d2c78daba9a9e6e1ff49ae9d5f879a7e

    • SSDEEP

      12288:vQf0XZ2DGCQJ6ObgD4Jzfy2CZXz6rdtVKdE2SzvaPu7U0N2ZxL/A05Z37Txe+d2j:4foFXJ9N

    Score
    1/10
    behavioral13

    • Target

      darwin.amd64/VDPluginCrypt.dylib

    • Size

      40KB

    • MD5

      9f7a0c7d3fb7bb7595edc6cbfc776882

    • SHA1

      34066351e924833a1cc87aa3b3f9d1753a6ceb84

    • SHA256

      843b35cbbded3a767ef11446e573cf1a05be539882803ab38c4ea1d04ae97b4c

    • SHA512

      3961b6f5f2685e511be67c2ccda7995a6e9e0412514bb5e2108f0d92b450154afe31e56380e5e81f22ee255d3c86cf9595344fba651e67094f784616bd17241f

    • SSDEEP

      384:dXXqmg4/1hdLt/BEaJoP2+MxxauEPrZ5D4F2Wk/Jr+Q8frzZrZPuzPrJhqc/rNaa:dXXC8L4+lEPHyGH8DPu/hab85

    Score
    1/10
    behavioral14

    • Target

      darwin.arm64/VBoxHostWebcam.dylib

    • Size

      266KB

    • MD5

      8dc5fd8379553fbad96a6c90967d512e

    • SHA1

      5ac06022783a552bf718a89a207940a5e7a926ec

    • SHA256

      b14901f90c0b669557d2fd891172ac8469b261e8fd315b56fc8b11cf31ca2bd1

    • SHA512

      442877e04db7ffbc33d35426f51b4abc45c3608a88b47eeeb73e5191eeb738cdb088fc7f18ee69b2069c026ccae3f2c66d8f37206043f0c7909a469ac7bc2610

    • SSDEEP

      3072:9+tt8AkQjkRGW6OyGq+yua2NZw2GYvxdhXzCLs0lspsoPBJ+eHXyYZhm6NdpSZ6J:I2wXYvxd5CjKEaXJhm6NdKm5

    Score
    1/10
    behavioral15

    • Target

      darwin.arm64/VBoxNvmeR3.dylib

    • Size

      101KB

    • MD5

      86a2a0e878b2dfde5b8d1537afe18d4f

    • SHA1

      5c3bde8d90d747d71f20060401f5ec1755af1d59

    • SHA256

      10233196e9ef21761e5e9efc05aed195ccfaaab9235c3b53b3e390789be7ee42

    • SHA512

      f2decad9fb23bb03ae33c3a250ea70d03d25ec355134813b27b00d9268adc414229715978014a94e67dcd3120d76c8056d0d09672aa872031f361ef7e0066609

    • SSDEEP

      768:X+V5DV2umg0uLQqyyiBZh/ySF7IIYkTKUN1tq1H9VISW8GjVbC80Dm7VEPKjn8e7:QR2y0uLQqyy+9bKUNnqF0EKjn8eP3K

    Score
    1/10
    behavioral16

    • Target

      darwin.arm64/VBoxPuelCrypto.dylib

    • Size

      86KB

    • MD5

      1a7a71343d7e2e596af87d7e2de05d5c

    • SHA1

      3f88756abeb6274d99cd900994f74af65e1ef936

    • SHA256

      a89da504b92227a485500ba380e3ba5b08ed536e65ed4b548268a3127c42c7ba

    • SHA512

      4c88505de28980f990116b3909b5885b4b4aaab68729a5c316104cd72879512c57ad23b880cbc622ca238af39c06d67cfe8a59ba857933db1d50a48e935a0df9

    • SSDEEP

      768:R30QQ5QAjraEsXbRM1LQz6QE8GYZ8ab8:aQAXadXb+hQGf3YeK

    Score
    1/10
    behavioral17

    • Target

      darwin.arm64/VBoxPuelMain.dylib

    • Size

      6.1MB

    • MD5

      636db44c5003865d722c05eb74cd67d7

    • SHA1

      76c4337a36f13e0147cb002af9f4bf14feb174a0

    • SHA256

      6d9cd1f245e72aa6c7ce8512d3cc53feece19dfa2e9c0a04c0df6761c0c66e1f

    • SHA512

      4d3aed2da165c0c56be5bef48dd1ce8547175743987c20162791c4b4939043071e267e5ac9b433c9637da5bb1285cc8f818c552efff2fe051ca08bfa07f93ff1

    • SSDEEP

      24576:vmPr6C4TX9Nz1m4jIQPjYBCiv56bMpYskeXOq3ownJz4pEab0A/XUWgy5MQYCCEt:jnLmCNYJo8YEab0A/XxMk

    Score
    1/10
    behavioral18

    • Target

      darwin.arm64/VBoxPuelMainVM.dylib

    • Size

      67KB

    • MD5

      f5a495df6b8aa98579c7aa5edc9309c1

    • SHA1

      86501cb650a0712a35d14cd5e3e506216b58dd2c

    • SHA256

      f0885ca6ae55f066ed2bce4523334b870f53e641eac81dba26d375b09302d410

    • SHA512

      03aabc7549693c76387bc5abc63867d4ee19564776bd84eb88755bc8934b2a326f921fef67e2836b4b35d797b40658fbeb32529284d05d858362839876b07c43

    • SSDEEP

      384:qVtBfysjr+Q8frzZrU8LrJjmurNab8er:qVz6sF8v08ab8

    Score
    1/10
    behavioral19

    • Target

      darwin.arm64/VBoxUsbCardReaderR3.dylib

    • Size

      100KB

    • MD5

      bcc6f3033abc97ea4966510727d78688

    • SHA1

      b35016a395115ad7d1fd26e86c171abb16043ffb

    • SHA256

      61efe09e081860e33b3557a542b59a66e6cf6452189de1a57b660e64f795339f

    • SHA512

      10251dd83e40c373d4bfc85e01be9aaf8521bbc0bc91163848059f74eb1267caa7dc0060cdd37722f01139bb355d09a7b0bcf503b4a0e5d23cdc83d09e754cf6

    • SSDEEP

      1536:/TgHkneeqGby6xewjjzVfk8j8Wl3DcU/wmt/K:LrBqGy+fy8jVp3

    Score
    1/10
    behavioral20

    • Target

      darwin.arm64/VBoxUsbWebcamR3.dylib

    • Size

      101KB

    • MD5

      1acd94d22aae015843f079f752c29b6a

    • SHA1

      6914c6ce107403c81e60ffd6fa6dd578bf3a6394

    • SHA256

      f2abbce8c9991e9892ea9edacd344dd3d0819c1e210a303001c5ddd3f1398d14

    • SHA512

      2b43f8e8b235568969a94206cf3a7ef37f5795bb3312b8fb943e8154ea3b71982da1fdaf743648da3bb85b137e055175cd1e9d9990d93e6e879589d82be86b5e

    • SSDEEP

      768:Y/HS46c6kQiohyqoEFhEeguvh+IAY1bXcjM5xVUQpwlEqh9ZTpVwd+Jqh7n8vthq:7c6kwbE+bAY1IAJpwlXjTpVwBL+7K

    Score
    1/10
    behavioral21

    • Target

      darwin.arm64/VBoxVRDP.dylib

    • Size

      561KB

    • MD5

      7d801bdd9f00f1ca111c85bc8dc3c7e8

    • SHA1

      20c7759c24129e663c4984cfd19a185c5bb650f1

    • SHA256

      ea3d69cd1eced66b6491b7250f3ae2289163bb1e7507fbe36cd5687f868b8ac0

    • SHA512

      cb81b6808a0b1332d0d05750186cba523e77f66ee819a0bf79a750943fba7a322001190b08ea9ea6883ea2b7aa17a270fcb25103886a1fb845670f8e999c733b

    • SSDEEP

      12288:kPd2+5d+kl2ckuZOA7cpWnNqwVBzur1dysy20XEb7QP7vldptc/:klX1opWnNqwVBzur1dysy2vb7QPhc

    Score
    1/10
    behavioral22

    • Target

      darwin.arm64/VDPluginCrypt.dylib

    • Size

      68KB

    • MD5

      e3a156b4f6353a19a8c40551f9849d41

    • SHA1

      5b7547f7eac5decd16bf1be3aaccc981319d38de

    • SHA256

      b90db3b27c213ab8957fb2f3ff33518f0a35b0f381ca2278c29bba648c906bd9

    • SHA512

      c8f50311dfe7c423036cd697248232fa24148f55b0e1c6786d9c51f3e6c1cf796455cd8677429a94ef7582d3db7cd195261c88da53cce8c46750b78be58f596a

    • SSDEEP

      384:PZhDDx9jLdcdKnKzfhrtidyr+Q8frzpr7PrJhqc/rNab8er:PZhpYdPzJQG8xhab8

    Score
    1/10
    behavioral23

    • Target

      linux.amd64/VBoxHostWebcam.so

    • Size

      470KB

    • MD5

      04fd38038e616c57f21f103678604702

    • SHA1

      b01d105a5f9fe9b979ccbc98ea1ecccce446db07

    • SHA256

      47df1a760d6c29d0f7a128d4b473e40dc400dc4e171a43e91fe5e356fe8b1152

    • SHA512

      08d24865663ed10bef990b811f51a742dcd685c384e25964d71100957518e853387e47f31b5c33345582cd3da86dd042125f2a2fb94af330051e8e4556764736

    • SSDEEP

      3072:sB0vCj0TCd4YHtDGnWTfyZXOmkwMpHZkjhd+Ss5FuoVcJIclWpiSjnnnANqDM:V2cwJjoXOmkRHid+Ss580uIcApyADM

    Score
    1/10
    behavioral24

    • Target

      linux.amd64/VBoxNvmeR0.r0

    • Size

      13KB

    • MD5

      75259dbfba8030bf2e75d7b311fdedd1

    • SHA1

      69d31884620470850cb32890cdd4b7f0ec29ca16

    • SHA256

      b8d82767d5554684b1a94c737a0f243dd6c18623e29b568f99c18a83d68bfce5

    • SHA512

      5835d411954bce662b6419aba9d6df422763af3172c8be019233b1fd6b063d3fd6b7476c529c48dca8b927891805114b6e2bbbc5ff3052a9498924aa183e5928

    • SSDEEP

      192:RjcIK0B5RnjMuXF+9R8QLiVNTLrODBWNfCbuB:vhB5RnZXCFLiVNTLKdWp8+

    Score
    1/10
    behavioral25

    • Target

      linux.amd64/VBoxNvmeR3.so

    • Size

      58KB

    • MD5

      0d15a45eb948da06d3bc8c41a5063ac6

    • SHA1

      a89b6079394578a662035a9ef24465d6eb237498

    • SHA256

      e46c41dec7e5823e1ef07bd1dc27be7416cb9c931bfa475191f47994e5ffcf75

    • SHA512

      af53d2af4dca7fac6baf38aaa4cb0e2c0ab25dc2f3d73e48f2ec065fa25d7dd52d909455f72dc5426f8d2d33348cf16e55208060de6aaf18abad3661de797791

    • SSDEEP

      768:VGn/DFSTJ83zfbhxsBH0zWT+ImibioOVIMGru2Mct+TLW/hyxVWN82jNr42qDm5h:+YTu7bcN+WT+IzwlBHTLA

    Score
    1/10
    behavioral26

    • Target

      linux.amd64/VBoxPuelCrypto.so

    • Size

      30KB

    • MD5

      9fd7d15ed0c6e86bbb8f585c1cc7e3e6

    • SHA1

      313990b2660089e8c7e7d7bf6c63de13e7972cae

    • SHA256

      12b867c257dc656d63a9a6cd70a907144081da7b2e5aa084001c383bee32dc1d

    • SHA512

      1c89b2422d3c27061bdc6b4ec1080b0045008c7c697d728f93b0db567fcc77c86dba7e4b29330f906e605bf65b9897df279c2538f8bdc90f8099db5630735178

    • SSDEEP

      384:xAtkNNWcZMFSheIdf07UsS3xRV2IgnmNI3zOVrJi8kGW:qGfTZYLIdc7UsSlvRVpk5

    Score
    1/10
    behavioral27

    • Target

      linux.amd64/VBoxPuelMain.so

    • Size

      8.8MB

    • MD5

      ac6afb5d9fb79bfe7030758ad2c18bc8

    • SHA1

      2fa4e9160a818b609d5448af6afc49d6c0d69a5c

    • SHA256

      83a078c1ecd22e148dccf4a5b2135598f6d926da09799887227d40602cb50521

    • SHA512

      a6ca749b20048a7ae8a7a5827317aeea59464d764dbeed516f74f59770492d572d3b15c84bc2094fedfae3805dc0d39dea5e27084d72908ffe447598ed583274

    • SSDEEP

      49152:N9NJwqNri4B1+tJuq18eY801BBSQcVut+yTBrEiJE84RvSTQvyIq+Czg0mo4uFrC:cqNjB1+tgq1nYFoIEUy0j45XNW833

    Score
    1/10
    behavioral28

    • Target

      linux.amd64/VBoxPuelMainVM.so

    • Size

      13KB

    • MD5

      7ee525c7482b200159d610fa3b3ca5e8

    • SHA1

      578c8e4b797f47a9b85124cf06bde8884d7f3c6c

    • SHA256

      89d6cf373345248b85ec369589271082e3327f1c6e381ec40209d80df0858a7d

    • SHA512

      b23efe89f137c5fb88a3a2a2f39ce2b3703873aa78ec5d1f3c94f9be72223c5d61801c21f92d026eaafb55e4f09898ee6c9b1112fb912305940e709ed34f2a37

    • SSDEEP

      96:RTgVMBWB+joR1/zQHup5oktWvsKcWKyVuIbDscUb:RT80jgBzQOp51AEKcWma

    Score
    1/10
    behavioral29

    • Target

      linux.amd64/VBoxUsbCardReaderR3.so

    • Size

      59KB

    • MD5

      7c5519904cab108e424d0e6d63c48ab3

    • SHA1

      5d1f1a7bb98ea826f16da3cb627fa1b53f122627

    • SHA256

      1ff16984e41ebe30f8afff25a927b441101214a7fc95ee491eb09eaf0fde2dda

    • SHA512

      b206d6e96981623c721eda71a779cee59c49449a5d7c87f22e3703acf1119eb15c6aee880feca63b184e2eea98f4c18a03a392e3c81d5f93dba6352ccbf90892

    • SSDEEP

      1536:Vjbn7SvkQG6Nqf0mhRdB8imH4sCKETjU/wX7:9CJ81mledT3

    Score
    1/10
    behavioral30

    • Target

      linux.amd64/VBoxUsbWebcamR3.so

    • Size

      66KB

    • MD5

      dd860b35a1bcbf8bb852719983dea101

    • SHA1

      d39beeef9df4aba053380145ebc4804b05348a2c

    • SHA256

      4f7a323daaf34bef8b368c8cd95616983feb911c37be070a69e08a9b47a04f65

    • SHA512

      37ea9407f51cf657b9e29e602df1616cb0599d85f4e5b1cfa5e3868242f6b4db71dac34d8440fa7387417832de346b47dd75b14a965e9b87b3af7fc516381d1e

    • SSDEEP

      768:zrQax4N0xg3lfmpI5+AAbPyEAziFPZCDViJ3eVrqya/NxT2gq6unlJ5T5pX3RNmt:zrQ24egIpY1QmViU+hDKljT59R8

    Score
    1/10
    behavioral31

    • Target

      linux.amd64/VBoxVRDP.so

    • Size

      800KB

    • MD5

      56cf4673401fb0bbd2307c33929f3f13

    • SHA1

      98063854470b709cad8c2d14b668a35356ebca05

    • SHA256

      974281685d21fa738423be61958b30281a6489f8edeafeb23aa1231aa3e1e371

    • SHA512

      fd81f0cabdfd76cb5470bd6a8f89f9f064c683bb8fd36f68f037edd5a431b28686d83b891e753b5a7574bf65f1cb56a5b5fe675347754e2ccd4feb2ec8238b3c

    • SSDEEP

      6144:3J3mzxSrQI817hXva34eS/Ngn+AkgcE1clb/jWdN7lbXOm05jyPy586CM5QBcFBo:52zQrG9SIf/O+PgcE0aI0KzQupi

    Score
    1/10
    behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
1/10

behavioral1

discovery
Score
3/10

behavioral2

discovery
Score
3/10

behavioral3

discovery
Score
4/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10