General
-
Target
https://cdn.discordapp.com/attachments/1266564505010180179/1268709459346325597/Executor.dist.zip?ex=66ae1202&is=66acc082&hm=a1b47f84526084772855ff151578ccd979db41051508612c8caee75402fa8b20&
-
Sample
240802-ws6xvsvakk
Score
9/10
Malware Config
Targets
-
-
Target
https://cdn.discordapp.com/attachments/1266564505010180179/1268709459346325597/Executor.dist.zip?ex=66ae1202&is=66acc082&hm=a1b47f84526084772855ff151578ccd979db41051508612c8caee75402fa8b20&
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Themida packer
Detects Themida, an advanced Windows software protection system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-