VBShower — Malware Profile

VBShower is a backdoor that has been used by Inception since at least 2019. VBShower has been used as a downloader for second stage payloads, including PowerShower.

MITRE ATT&CK techniques (5)

• T1059.005 Visual Basic
• T1070.004 File Deletion
• T1071.001 Web Protocols
• T1105 Ingress Tool Transfer
• T1547.001 Registry Run Keys / Startup Folder

Attributed threat actors

• Inception

Read the full analysis on IntelFusions