General

  • Target
    vexor-updater.exe
  • Size 2.4MB
  • Sample260711-s8nvfaet2m
  • SHA256 902584a04274d0cfbb766ace6f0b52d90d4b43bd0c6bda89ca5a6547662f02b2
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      vexor-updater.exe
    • Size 2.4MB
    • SHA256 902584a04274d0cfbb766ace6f0b52d90d4b43bd0c6bda89ca5a6547662f02b2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Looks for VirtualBox Guest Additions in registry

    • Looks for VMWare Tools registry key

    • Drops desktop.ini file(s)

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks