General
- Target Journal.exe
- Size 13.5MB
- Sample260703-k1fvvset5t
- SHA256 8226b5885ea94def0a895da5a98fdcbd826da231a0eaded5bfa380a84cf8d0d9
Score
9/10
Malware Config
Targets
-
- Target Journal.exe
- Size 13.5MB
- SHA256 8226b5885ea94def0a895da5a98fdcbd826da231a0eaded5bfa380a84cf8d0d9
Score9/10Identifies VirtualBox via ACPI registry values (likely anti-VM)
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
Suspicious use of NtSetInformationThreadHideFromDebugger