General

  • Target
    Injector.exe
  • Size 3.7MB
  • Sample260629-tvnsyshw91
  • SHA256 db88ebb6495df9ac9fdc37601d8ff79d42770356d2ccbe1fd96ea2af23b635a9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Injector.exe
    • Size 3.7MB
    • SHA256 db88ebb6495df9ac9fdc37601d8ff79d42770356d2ccbe1fd96ea2af23b635a9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks whether UAC is enabled

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks