General
- Target MALU6.rar
- Size 7.9MB
- Sample260824-gynadacc49
- SHA256 07d98c1a6c026f4531854155c2a0f7927f2095731194a89f5c36885394df9874
Score
9/10
Malware Config
Targets
-
- Target MALU6.exe
- Size 6.4MB
- SHA256 ee7f6a902485fc36035afc2a9507ea65160e65da868e2df37d0b1176155cc419
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target MALULER.exe
- Size 2.2MB
- SHA256 3c1d9ca5881c3a3280643dffc6c96e14a2e568c9ad3fbada7de61d7dcc93a9f9
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger