General
- Target Volume Tools Assistant 7.6.exe
- Size 76.2MB
- Sample260530-vykfdact4m
- SHA256 c9581df4f133e9a09c5c85a280aa8b4aef3d926efcab57727c239e2338bc33db
Score
8/10
Malware Config
Targets
-
- Target Volume Tools Assistant 7.6.exe
- Size 76.2MB
- SHA256 c9581df4f133e9a09c5c85a280aa8b4aef3d926efcab57727c239e2338bc33db
Score8/10-
Drops file in Drivers directory
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1