General
- Target MT5 6103 regular.zip
- Size 117.5MB
- Sample260808-2579cazxct
- SHA256 e5c21a8f7c95126eb9b021aef3fc87a22cc78ba4f77471b5ad67ea99751fe6a0
Score
10/10
Malware Config
Targets
-
- Target MetaEditor64.exe
- Size 108.3MB
- SHA256 f48f68634a6e91d94c5b14a450e3b56c39c404332421ffeb5b5e70530ea1d01a
Score7/10-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target metatester64.exe
- Size 18.7MB
- SHA256 2b0aff6450028d227d881982f6ccdd02baa453774ee004866162438f3805fb6f
Score7/10-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target terminal64.exe
- Size 119.3MB
- SHA256 fe78fdc9d3e29c17e0949dcb0a9ea601f48f72b1c48f379bf6437b93681427ee
Score7/10-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger