A new Alina variant of the Alina malware family has been spotted in a new sample. This particular variant is using the ‘Mozilla/4.0’ (compatible; MSIE 7.0; Windows NT 5.1; InfoPath.1.2) A kernel-mode driver is responsible for hiding the malware’s process name (windefender.sys) This is the first time (as far as I know) that this particular variant has been included in the malware family. It would appear as though the author of this malware was used 100% of this code from the source code.”]
Source: https://jgrunzweig.github.io/posts/2015/01/alina-starts-to-blur-the-lines/