General
- Target BKFDT_file.exe
- Size 2.7MB
- Sample241118-ed2k6aspgr
- SHA256 cfccf0b1e8f8ab2be4d51838403d07d56c068b0a500c2afeb7f38d4176a11713
Score
10/10
Malware Config
Targets
-
- Target BKFDT_file.exe
- Size 2.7MB
- SHA256 cfccf0b1e8f8ab2be4d51838403d07d56c068b0a500c2afeb7f38d4176a11713
Score10/10-
Modifies Windows Defender Real-time Protection settings
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Windows security modification
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v15
Defense Evasion
Impair Defenses
2Disable or Modify Tools
2Modify Registry
2Virtualization/Sandbox Evasion
2