General
- Target cn_loader_v4.8.8.exe
- Size 21.8MB
- Sample260703-aemfeagx9t
- SHA256 dfe817cfe350af069fd8dc4bf23300ada634a723dfa0fe3686522ae9faafd679
Score
9/10
Malware Config
Targets
-
- Target cn_loader_v4.8.8.exe
- Size 21.8MB
- SHA256 dfe817cfe350af069fd8dc4bf23300ada634a723dfa0fe3686522ae9faafd679
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Loads dropped DLL
-
Themida packer
Detects Themida, an advanced Windows software protection system.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger