General

  • Target
    https://usc1.contabostorage.com/d46add0df8a847a68cd47cd65042a6bf:mine/RuntimeHost.exe
  • Sample260617-dtekwsas4j

Malware Config

Targets

    • Target
      https://usc1.contabostorage.com/d46add0df8a847a68cd47cd65042a6bf:mine/RuntimeHost.exe
    • Enumerates VirtualBox registry keys

    • Looks for VirtualBox Guest Additions in registry

    • Downloads MZ/PE file

    • Looks for VMWare Tools registry key

    • Executes dropped EXE

    • ConfuserEx .NET packer

      Detects ConfuserEx .NET packer.

MITRE ATT&CK Enterprise v16

Tasks