General
- Target SiteScraper.exe
- Size 30.0MB
- Sample260516-cf2mtsc16j
- SHA256 815cfa437fd01bcebf9976d36afab718dcd8e79e8125067995d1a33c05fb7786
Score
10/10
Malware Config
Targets
-
- Target SiteScraper.exe
- Size 30.0MB
- SHA256 815cfa437fd01bcebf9976d36afab718dcd8e79e8125067995d1a33c05fb7786
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Disables one or more Microsoft Defender components
Uses the Powershell Set-MpPreference cmdlet to disable one or more Microsoft Defender components.
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Enumerates processes with tasklist
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
- Target �{�[M�.pyc
- Size 1KB
- SHA256 b74bfcd8ba1ad45beea0fdc4fdad90a2cd764cca6f268720ad25dfb40483f9e1
Score1/10