General
- Target https://cdn.discordapp.com/attachments/1513223144037552173/1535488916029833256/ChipsetUtil.exe?ex=6a77f2fd&is=6a76a17d&hm=eec75f3b94175f6726682a4e2ff39e5337ca93a02f33e668ce39c5506ee0dba2&
- Sample260808-d2r6ysgr6z
Score
9/10
Malware Config
Targets
-
- Target https://cdn.discordapp.com/attachments/1513223144037552173/1535488916029833256/ChipsetUtil.exe?ex=6a77f2fd&is=6a76a17d&hm=eec75f3b94175f6726682a4e2ff39e5337ca93a02f33e668ce39c5506ee0dba2&
Score9/10-
Looks for VirtualBox Guest Additions in registry
-
Downloads MZ/PE file
-
Looks for VMWare Tools registry key
-
Executes dropped EXE
-
VMProtect packed file
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger