Overview

overview

10

Static

static

1

URLScan

urlscan

1

https://github.com/m...

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    https://github.com/mandiant/capa-testfiles/blob/master/Practical%20Malware%20Analysis%20Lab%2001-01.exe_
  • Sample260425-sv7qdset6m
Score
10/10
virtualgatebackdoordiscovery

Malware Config

Targets

    • Target
      https://github.com/mandiant/capa-testfiles/blob/master/Practical%20Malware%20Analysis%20Lab%2001-01.exe_
    Score
    10/10
    backdoordiscoveryvirtualgate

    • Detects VirtualGate payload

    • Family: VirtualGate

      VirtualGate is a Windows-based backdoor deployed within guest virtual machines hosted on compromised VMware ESXi servers.

      backdoorvirtualgate

    • Downloads MZ/PE file

    • Loads dropped DLL

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks