General
- Target https://cdn.discordapp.com/attachments/1541142112970739793/1542252433080852590/main2_1.exe?ex=6a908e01&is=6a8f3c81&hm=d12a01dd7568796844a07cdce2b30cfd83babd143e567e5c5db29da97bee6741&
- Sample260826-x4cc3avele
Score
9/10
Malware Config
Targets
-
- Target https://cdn.discordapp.com/attachments/1541142112970739793/1542252433080852590/main2_1.exe?ex=6a908e01&is=6a8f3c81&hm=d12a01dd7568796844a07cdce2b30cfd83babd143e567e5c5db29da97bee6741&
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Downloads MZ/PE file
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Executes dropped EXE
-
Themida packer
Detects Themida, an advanced Windows software protection system.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger