General
- Target lxtest.sh
- Size 2KB
- Sample261014-vta15shb39
- SHA256 895f9d2388853e8389b759cb4ca35368a2c398bd57feb7d18473b1caf06cd09a
Score
6/10
Malware Config
Targets
-
- Target lxtest.sh
- Size 2KB
- SHA256 895f9d2388853e8389b759cb4ca35368a2c398bd57feb7d18473b1caf06cd09a
Score6/10-
Checks SCSI settings
Checks list of SCSI devices which may be used to detect VMware or VirtualBox.
-
Checks hardware identifiers (DMI)
Checks DMI information which indicate if the system is a virtual machine.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Reads MAC address of network interface
Fetches the MAC address of active network interfaces. May be used to detect known values for hypervisors.
-
Reads hardware information
Accesses system info like serial numbers, manufacturer names etc.
-
Reads list of loaded kernel modules
Reads the list of currently loaded kernel modules, possibly to detect virtual environments.