General
- Target Shabi.exe
- Size 21.0MB
- Sample260723-ddal1aff26
- SHA256 24d1fb44d9aa99cc650ce1ab279d9bd2914b11c706449807fe74e5ee0670a905
Score
9/10
Malware Config
Targets
-
- Target Shabi.exe
- Size 21.0MB
- SHA256 24d1fb44d9aa99cc650ce1ab279d9bd2914b11c706449807fe74e5ee0670a905
Score9/10-
Enumerates VirtualBox DLL files
-
Enumerates VirtualBox registry keys
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VirtualBox drivers on disk
-
Looks for VMWare Tools registry key
-
Looks for VMWare drivers on disk
-
Looks for VMWare services registry key.
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Ignore Process Interrupts
1Virtualization/Sandbox Evasion
7Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1