General
-
Target
https://cdn.discordapp.com/attachments/1224006727532417025/1231703822901186660/modest-menu_v1.0.0_unknowncheats.me__unknowncheats.me__1.zip?ex=6637ec93&is=66257793&hm=e4a923f5e2f19a6be3f3f1d2f5d7d53c0352db988c2f03a654771b61a091efb6&
-
Sample
240421-zcr1jsbd5x
Score
9/10
Malware Config
Targets
-
-
Target
https://cdn.discordapp.com/attachments/1224006727532417025/1231703822901186660/modest-menu_v1.0.0_unknowncheats.me__unknowncheats.me__1.zip?ex=6637ec93&is=66257793&hm=e4a923f5e2f19a6be3f3f1d2f5d7d53c0352db988c2f03a654771b61a091efb6&
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Themida packer
Detects Themida, an advanced Windows software protection system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-