General
- Target liHPF2KWjt8xGPW2c.exe
- Size 42.9MB
- Sample260815-wtngxa11ct
- SHA256 d6cb08411deb408a4b24c554835093d5af921d5634deeff971bce158f381d7ce
Score
9/10
Malware Config
Targets
-
- Target liHPF2KWjt8xGPW2c.exe
- Size 42.9MB
- SHA256 d6cb08411deb408a4b24c554835093d5af921d5634deeff971bce158f381d7ce
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger