General
- Target Kaspersky4Win_21.26.4.406_Rus.exe
- Size 587.5MB
- Sample260820-esp6nsbc98
- SHA256 456905cd60df7c0e81ac0ed62b6048bc46bfceb44ac27fb226ae2e0f861f834a
Score
9/10
Malware Config
Targets
-
- Target Kaspersky4Win_21.26.4.406_Rus.exe
- Size 587.5MB
- SHA256 456905cd60df7c0e81ac0ed62b6048bc46bfceb44ac27fb226ae2e0f861f834a
Score9/10-
Enumerates VirtualBox registry keys
-
Drops file in Drivers directory
-
Looks for VMWare Tools registry key
-
Looks for VMWare services registry key.
-
Looks for Xen service registry key.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks for any installed AV software in registry
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Virtualization/Sandbox Evasion
4Discovery
Browser Information Discovery
1Peripheral Device Discovery
2Query Registry
6Software Discovery
1Security Software Discovery
1System Information Discovery
5System Location Discovery
1System Language Discovery
1System Time Discovery
1Virtualization/Sandbox Evasion
4