General
- Target virtue.exe
- Size 19.4MB
- Sample261030-lfcs5sa16v
- SHA256 733e5dd0625f8084070a62a4876827f53cfebd10c65ef81399652bd07a5328f2
Score
9/10
Malware Config
Targets
-
- Target virtue.exe
- Size 19.4MB
- SHA256 733e5dd0625f8084070a62a4876827f53cfebd10c65ef81399652bd07a5328f2
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger