General

  • Target
    https://allhypervisor.com/vbs
  • Sample260720-s2bxasey2m

Malware Config

Targets

    • Target
      https://allhypervisor.com/vbs
    • Modifies boot configuration data using bcdedit

    • Executes dropped EXE

    • Loads dropped DLL

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v16

Tasks