General
- Target svchost.exe
- Size 15.0MB
- Sample260810-q2r76sam4t
- SHA256 b917e314ba91a320282906c2e59d1f8d915059e4c320eb3eebb2fddc9c2306dc
Score
9/10
Malware Config
Targets
-
- Target svchost.exe
- Size 15.0MB
- SHA256 b917e314ba91a320282906c2e59d1f8d915059e4c320eb3eebb2fddc9c2306dc
Score9/10-
Looks for VirtualBox executables on disk
-
Loads dropped DLL
-
Adds Run key to start application
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1