General
- Target fafd551638daa4ab17ebdc71f2bffd8599332b1f1e95409af51870502cd65e38.zip
- Size 1.7MB
- Sample241111-qf72haynbv
- SHA256 d3bcd07cac842a5f7a0c99f07454dea366024baf3cd85fba3c12830a2c580f0a
Score
9/10
Malware Config
Targets
-
- Target fafd551638daa4ab17ebdc71f2bffd8599332b1f1e95409af51870502cd65e38.exe
- Size 1.8MB
- SHA256 fafd551638daa4ab17ebdc71f2bffd8599332b1f1e95409af51870502cd65e38
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Suspicious use of NtSetInformationThreadHideFromDebugger