General
- Target KernelHookLoader.exe
- Size 4.7MB
- Sample260601-mjfvmsht6w
- SHA256 083c067db48d3cb3483eb4d0c345a1ffa515f72beda6b08e0d5ffc1fd0e0edd5
Score
9/10
Malware Config
Targets
-
- Target KernelHookLoader.exe
- Size 4.7MB
- SHA256 083c067db48d3cb3483eb4d0c345a1ffa515f72beda6b08e0d5ffc1fd0e0edd5
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Themida packer
Detects Themida, an advanced Windows software protection system.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger