General
-
Target
https://cdn.discordapp.com/attachments/1164432395227910166/1197395502484947036/Nenyooo_1.0.3028.0.9.zip?ex=65e00676&is=65cd9176&hm=a366a0925cfc1e6af6af78dd824050b6f4b8533a34fda74833fb78d8344541d7&
-
Sample
240219-t93wesge3t
Score
9/10
Malware Config
Targets
-
-
Target
https://cdn.discordapp.com/attachments/1164432395227910166/1197395502484947036/Nenyooo_1.0.3028.0.9.zip?ex=65e00676&is=65cd9176&hm=a366a0925cfc1e6af6af78dd824050b6f4b8533a34fda74833fb78d8344541d7&
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Themida packer
Detects Themida, an advanced Windows software protection system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-