General

  • Target
    jar_mods_injector (1).rar
  • Size 2.0MB
  • Sample260809-slj8qsttct
  • SHA256 d16890802345ec5d5c5045a9775642e98f4f1cc19e188a5540faec7e609abea6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jar_mods_injector.exe
    • Size 5.4MB
    • SHA256 0d577d29185c72eec169ea4c0cd171f07815b06d01926ff7de1a3bb896f5bbb5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Enumerates VirtualBox registry keys

    • Looks for VMWare services registry key.

    • Discovers running processes

      Running process information can be used to identify security tools or plan follow-on actions.

MITRE ATT&CK Enterprise v16

Tasks