General
- Target erto3e4rortoergn.exe
- Size 6.2MB
- Sample261024-2bzecaev8r
- SHA256 e668ed31d8c902b84817def197b2cca8f0502acd28199ef975b9314c953a7f52
Score
9/10
Malware Config
Targets
-
- Target erto3e4rortoergn.exe
- Size 6.2MB
- SHA256 e668ed31d8c902b84817def197b2cca8f0502acd28199ef975b9314c953a7f52
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Loads dropped DLL
-
Themida packer
Detects Themida, an advanced Windows software protection system.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger