General
- Target pClFQsfr.rar
- Size 4.0MB
- Sample260722-c3fzmshh37
- SHA256 147a018dcedaee11066bed6446705d19cae3c88dc1a8e0ee0245b128ab7d5823
Score
9/10
Malware Config
Targets
-
- Target R3nzSkin.dll
- Size 3.9MB
- SHA256 edf6d92cb2a2b7d7ccc01031ca2224fec5a2966b004c3eedd83be697e8d3a9c3
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Themida packer
Detects Themida, an advanced Windows software protection system.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target VWxlUcGV.exe
- Size 198KB
- SHA256 8575a0d8689f341dd76e9f3023716d5f72bd6ceeadf05ba1666068d17c371c11
Score3/10