General
- Target a4e1caab1b9642ef645b6549ca09d303.exe
- Size 88KB
- Sample201109-e3vy4glzye
- SHA256 855dcd368dbb01539e7efa4b3fefa9b56d197db87b1ba3ede5e1f95927ea2ca3
Score
7/10
Malware Config
Targets
-
- Target a4e1caab1b9642ef645b6549ca09d303.exe
- Size 88KB
- SHA256 855dcd368dbb01539e7efa4b3fefa9b56d197db87b1ba3ede5e1f95927ea2ca3
Score7/10-
Checks QEMU agent state file
Checks state file used by QEMU agent, possibly to detect virtualization.
-
Legitimate hosting services abused for malware hosting/C2
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext