General
- Target https://share.google/EVZJrfczHBHBnF8NL
- Sample261023-2dj3favy5m
Score
9/10
Malware Config
Targets
-
- Target https://share.google/EVZJrfczHBHBnF8NL
Score9/10-
Enumerates VirtualBox registry keys
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Network Share Discovery
Attempt to gather information on host network.
-
Executes a VBScript file via the Windows Script Host.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Network Share Discovery
1Peripheral Device Discovery
1Query Registry
8System Information Discovery
5System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1System Time Discovery
1Virtualization/Sandbox Evasion
4