General
- Target calculatoronpython.exe
- Size 8.1MB
- Sample260708-vq21fset9w
- SHA256 5319dacae7cc6f7793befe22cf8e69bf33553f22d53a1e250bee0035f10c7f54
Score
8/10
Malware Config
Targets
-
- Target calculatoronpython.exe
- Size 8.1MB
- SHA256 5319dacae7cc6f7793befe22cf8e69bf33553f22d53a1e250bee0035f10c7f54
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.