General
- Target DriverAutoPack.exe
- Size 3.2MB
- Sample260712-yanpnsf15j
- SHA256 b0de16a280f62f39075e6ec550e0317d820fe0a46e46f019cd14f8e3d15943a8
Score
9/10
Malware Config
Targets
-
- Target DriverAutoPack.exe
- Size 3.2MB
- SHA256 b0de16a280f62f39075e6ec550e0317d820fe0a46e46f019cd14f8e3d15943a8
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Themida packer
Detects Themida, an advanced Windows software protection system.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger