General
-
Target
https://cdn.discordapp.com/attachments/1262107791133507615/1276474431237263381/Dice_X_Official_Bootstrapper.zip?ex=66ca51b4&is=66c90034&hm=fe19aef0250f9fb96de3805778ce23970127fc90a0d1930c6a0b233effe147a7&
-
Sample
240824-cbtfnazcjf
Score
9/10
Malware Config
Targets
-
-
Target
https://cdn.discordapp.com/attachments/1262107791133507615/1276474431237263381/Dice_X_Official_Bootstrapper.zip?ex=66ca51b4&is=66c90034&hm=fe19aef0250f9fb96de3805778ce23970127fc90a0d1930c6a0b233effe147a7&
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Themida packer
Detects Themida, an advanced Windows software protection system.
-
Legitimate hosting services abused for malware hosting/C2
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-