General
- Target echo-free.exe
- Size 29.4MB
- Sample240822-wd21cszcpd
- SHA256 2a591601e7bc36471b35109f9cfded268e5e4d2eaef4cc5cb64632705fdb1c46
Score
9/10
Malware Config
Targets
-
- Target echo-free.exe
- Size 29.4MB
- SHA256 2a591601e7bc36471b35109f9cfded268e5e4d2eaef4cc5cb64632705fdb1c46
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks whether UAC is enabled
-
Drops file in System32 directory
-
Suspicious use of NtSetInformationThreadHideFromDebugger