General
- Target unlicense.7z
- Size 72.6MB
- Sample260730-sa76esbc44
- SHA256 d57f150311701a72d01b1fedc2414ee0e3e33cc82e36b4e0a4110482a58a2352
Score
7/10
Malware Config
Targets
-
- Target unlicense.7z
- Size 72.6MB
- SHA256 d57f150311701a72d01b1fedc2414ee0e3e33cc82e36b4e0a4110482a58a2352
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Themida packer
Detects Themida, an advanced Windows software protection system.
-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops desktop.ini file(s)
-
Drops file in System32 directory
-
Probable phishing domain
-
- Target DDNet.exe
- Size 24.6MB
- SHA256 84d2c4c67979c3d0c139c2dc20fbb547988cb09467f7f74c416d89808d152a90
Score7/10-
Themida packer
Detects Themida, an advanced Windows software protection system.
-
- Target unlicense.exe
- Size 59.5MB
- SHA256 a8ea10ed89029b9ba1018f1bfef722a1012dbcec1c432ceb3d26d0b9624c489c
Score7/10-
Loads dropped DLL
-
- Target __main__.pyc
- Size 268B
- SHA256 bfeeecc96862dcf19bfb8ff94f85251ac0bb1de72c6f9081e2160947dd4299e7
Score3/10