General
- Target https://www.resight-cheats.net/
- Sample261107-y99fese121
Score
9/10
Malware Config
Targets
-
- Target https://www.resight-cheats.net/
Score9/10Identifies VirtualBox via ACPI registry values (likely anti-VM)
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
Executes dropped EXE
Loads dropped DLL
Themida packer
Detects Themida, an advanced Windows software protection system.
Checks whether UAC is enabled
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Defense Evasion
Debugger Evasion
1Obfuscated Files or Information
1Command Obfuscation
1Virtualization/Sandbox Evasion
1Discovery
Browser Information Discovery
1Debugger Evasion
1Query Registry
4System Information Discovery
4System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1System Time Discovery
1Virtualization/Sandbox Evasion
1