General
- Target AntiAnalysis.exe
- Size 42KB
- Sample260527-1frdvsct9t
- SHA256 450461e6a85fa293753e11b7fd6ca462543a11fbaff7b6953aee48f0458bdf82
Score
9/10
Malware Config
Targets
-
- Target AntiAnalysis.exe
- Size 42KB
- SHA256 450461e6a85fa293753e11b7fd6ca462543a11fbaff7b6953aee48f0458bdf82
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Modifies Windows Firewall
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1