General
- Target svchost.exe
- Size 8.5MB
- Sample260919-vmeezstdqb
- SHA256 0d7935b4c3a3e3abcf97eac0750c6da94e88e440684beaf97e8c3538f2fd41b7
Score
8/10
Malware Config
Targets
-
- Target svchost.exe
- Size 8.5MB
- SHA256 0d7935b4c3a3e3abcf97eac0750c6da94e88e440684beaf97e8c3538f2fd41b7
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Loads dropped DLL
-
- Target crypt_stub.pyc
- Size 211KB
- SHA256 23cecbc800ea23c3c0edf0f9d11b145b6faa88f1743fa95f48ae14fa4aafc163
Score3/10