General
- Target bypass.exe
- Size 1.3MB
- Sample260716-e2nzzacz5r
- SHA256 c8a4d2b721925c313f6add4c9d9d9519cc1adf5e7ba65432e945804ac90ec764
Score
9/10
Malware Config
Targets
-
- Target bypass.exe
- Size 1.3MB
- SHA256 c8a4d2b721925c313f6add4c9d9d9519cc1adf5e7ba65432e945804ac90ec764
Score9/10-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Modifies Windows Firewall
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Impair Defenses
1Disable or Modify System Firewall
1Virtualization/Sandbox Evasion
2