Overview
overview
7Static
static
1Oracle_Vir...2.8.gz
windows10-2004-x64
1Oracle_Vir...2.8.gz
windows11-21h2-x64
1Oracle_Vir....8.tar
windows10-2004-x64
1Oracle_Vir....8.tar
windows11-21h2-x64
1ExtPack-license.html
windows10-2004-x64
4ExtPack-license.html
windows11-21h2-x64
7ExtPack-license.rtf
windows10-2004-x64
1ExtPack-license.rtf
windows11-21h2-x64
1ExtPack-license.txt
windows10-2004-x64
1ExtPack-license.txt
windows11-21h2-x64
3ExtPack.manifest
windows10-2004-x64
3ExtPack.manifest
windows11-21h2-x64
3ExtPack.signature
windows10-2004-x64
3ExtPack.signature
windows11-21h2-x64
3ExtPack.xml
windows10-2004-x64
3ExtPack.xml
windows11-21h2-x64
4PXE-Intel.rom
windows10-2004-x64
3PXE-Intel.rom
windows11-21h2-x64
3darwin.amd....dylib
macos-10.15-amd64
1darwin.amd....dylib
macos-10.15-amd64
1darwin.arm....dylib
macos-10.15-amd64
1darwin.arm....dylib
macos-10.15-amd64
1linux.amd6...ain.so
ubuntu-18.04-amd64
1linux.amd6...nVM.so
ubuntu-18.04-amd64
1solaris.am...ain.so
ubuntu-18.04-amd64
1solaris.am...nVM.so
ubuntu-18.04-amd64
1win.amd64/...el.inf
windows10-2004-x64
1win.amd64/...el.inf
windows11-21h2-x64
3win.amd64/...in.dll
windows10-2004-x64
1win.amd64/...in.dll
windows11-21h2-x64
1win.amd64/...VM.dll
windows10-2004-x64
1win.amd64/...VM.dll
windows11-21h2-x64
1Analysis
- max time kernel
149s - max time network
94s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
02/05/2026, 09:28
Static task
static1
Behavioral task
behavioral1
Sample
Oracle_VirtualBox_Extension_Pack-7.2.8.gz
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
Oracle_VirtualBox_Extension_Pack-7.2.8.gz
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral3
Sample
Oracle_VirtualBox_Extension_Pack-7.2.8.tar
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
Oracle_VirtualBox_Extension_Pack-7.2.8.tar
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral5
Sample
ExtPack-license.html
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
ExtPack-license.html
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral7
Sample
ExtPack-license.rtf
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
ExtPack-license.rtf
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral9
Sample
ExtPack-license.txt
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
ExtPack-license.txt
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral11
Sample
ExtPack.manifest
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
ExtPack.manifest
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral13
Sample
ExtPack.signature
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
ExtPack.signature
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral15
Sample
ExtPack.xml
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
ExtPack.xml
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral17
Sample
PXE-Intel.rom
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
PXE-Intel.rom
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral19
Sample
darwin.amd64/VBoxPuelMain.dylib
Resource
macos-20250619-en
macos-10.15-amd64
Behavioral task
behavioral20
Sample
darwin.amd64/VBoxPuelMainVM.dylib
Resource
macos-20250619-en
macos-10.15-amd64
Behavioral task
behavioral21
Sample
darwin.arm64/VBoxPuelMain.dylib
Resource
macos-20250619-en
macos-10.15-amd64
Behavioral task
behavioral22
Sample
darwin.arm64/VBoxPuelMainVM.dylib
Resource
macos-20250619-en
macos-10.15-amd64
Behavioral task
behavioral23
Sample
linux.amd64/VBoxPuelMain.so
Resource
ubuntu1804-amd64-20260126-en
ubuntu-18.04-amd64
Behavioral task
behavioral24
Sample
linux.amd64/VBoxPuelMainVM.so
Resource
ubuntu1804-amd64-20260126-en
ubuntu-18.04-amd64
Behavioral task
behavioral25
Sample
solaris.amd64/VBoxPuelMain.so
Resource
ubuntu1804-amd64-20260127-en
ubuntu-18.04-amd64
Behavioral task
behavioral26
Sample
solaris.amd64/VBoxPuelMainVM.so
Resource
ubuntu1804-amd64-20260126-en
ubuntu-18.04-amd64
Behavioral task
behavioral27
Sample
win.amd64/VBoxExtPackPuel.inf
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
win.amd64/VBoxExtPackPuel.inf
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral29
Sample
win.amd64/VBoxPuelMain.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
win.amd64/VBoxPuelMain.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral31
Sample
win.amd64/VBoxPuelMainVM.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
win.amd64/VBoxPuelMainVM.dll
Resource
win11-20260130-en
windows11-21h2-x64
General
- Target Oracle_VirtualBox_Extension_Pack-7.2.8.gz
- Size 19.1MB
- Sample260502-lfktract4w
- SHA256 d7301435ee207ff96c5ad372939dc46d39e0f9db2bcce487cf1e8f739a2e845b
- MD5 1ca3fc369d89f2d3937dde9275e4e5e2
- SHA1 fdeac4f680b680591d68acb9fb1c1ba714725cd4
- SHA512 abef46967131ef0d37ab63a5c0b2d0b843e7c723a31b3f2daae8d9dd05fbef4feb33bd039ff0b7da2b1222e16809fa767736432d3bf533915b786dfaa89e70e0
- SSDEEP 393216:zXu6ZGRrgKl0wk38Vp+wVPHujNPaPE462VI39UvDZfYB2JOxNxtVzTMNT0NRW:z+nd0wkAtmj1+0iI3OrFUAyXtVyUW
- TLSH T1C11733CF8AB2417E3A78353CA7E3DFB98D0DF44984469B964F0952F355F068A01DE829
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5972 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 5972 7zFM.exe Token: 35 5972 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5972 7zFM.exe