General
- Target PukVisualLoader.exe
- Size 936KB
- Sample261024-vceb8sa12z
- SHA256 1b1e299bbd4e2fc60e528a26840bb7c322ac908877a26e46a30b5d67f101bfeb
Score
10/10
Malware Config
Targets
-
- Target PukVisualLoader.exe
- Size 936KB
- SHA256 1b1e299bbd4e2fc60e528a26840bb7c322ac908877a26e46a30b5d67f101bfeb
Score10/10-
Modifies WinLogon for persistence
-
Looks for VirtualBox Guest Additions in registry
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Looks for VMWare Tools registry key
-
Indicator Removal: Clear Persistence
Clear artifacts associated with previously established persistence like scheduletasks on a host.
-
Suspicious use of NtSetInformationThreadHideFromDebugger