General

  • Target
    aae780339fc73d8e41b3ce7c1d266946e76b043d5e618400f1500853d3c22d2c
  • Size 4.8MB
  • Sample260706-j9mt4agt2n
  • SHA256 aae780339fc73d8e41b3ce7c1d266946e76b043d5e618400f1500853d3c22d2c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      aae780339fc73d8e41b3ce7c1d266946e76b043d5e618400f1500853d3c22d2c
    • Size 4.8MB
    • SHA256 aae780339fc73d8e41b3ce7c1d266946e76b043d5e618400f1500853d3c22d2c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Drops startup file

    • Uses the VBS compiler for execution

    • KoiVM .NET virtualizer plugin for ConfuserEx

      Detects KoiVM .NET virtualizer plugin for ConfuserEx

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks