General
- Target Просьба проверить данные.rar
- Size 1.5MB
- Sample260805-k1cs7stdmg
- SHA256 d6c809ede6727a13de69f5560d9fa67e198ed9bc6883a2673655ddbc71027425
Score
9/10
Malware Config
Targets
-
- Target Aкт cвepки взaимныx pacчeтoв за период три месяца.pdf.exe
- Size 1.6MB
- SHA256 cdc371e508dbd43ef2fe37bcc84889c2e11b13a29623f656d8274ca81fae61fa
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target Образец.doc
- Size 58KB
- SHA256 53941bab58471d39ef78032f9610b9c535e610fda368db5a055bcf2c83db10d5
Score1/10