Skip to content

Instantly share code, notes, and snippets.

@warewolf
Created July 17, 2017 18:18
Show Gist options
  • Select an option

  • Save warewolf/2f582917996ab3e0edc4960f2e1da7e3 to your computer and use it in GitHub Desktop.

Select an option

Save warewolf/2f582917996ab3e0edc4960f2e1da7e3 to your computer and use it in GitHub Desktop.
domain xml for malware analysis under kvm/qemu
<domain type='kvm' xmlns:qemu='http://libvirt.org/schemas/domain/qemu/1.0'>
<sysinfo type='smbios'>
<bios>
<entry name='vendor'>LENOVO</entry>
</bios>
<system>
<entry name='manufacturer'>LENOVO</entry>
<entry name='product'>987654U</entry>
<entry name='version'>ThinkPad W540</entry>
<entry name='serial'>IHNJKV4</entry>
<entry name='sku'>LENOVO_VT_0038</entry>
<entry name='family'>ThinkPad W540</entry>
</system>
<baseBoard>
<entry name='manufacturer'>LENOVO</entry>
<entry name='product'>987654U</entry>
<entry name='version'>Win8 Pro DPK TPG</entry>
<entry name='serial'>7VFJ256X27V</entry>
</baseBoard>
</sysinfo>
<os>
<type arch='x86_64' machine='pc-i440fx-2.6'>hvm</type>
<bootmenu enable='no'/>
<smbios mode='sysinfo'/>
</os>
<devices>
<memballoon model='none'/>
</devices>
<qemu:commandline>
<qemu:arg value='-smbios'/>
<qemu:arg value='type=3,manufacturer=LENOVO'/>
<qemu:arg value='-smbios'/>
<qemu:arg value='type=4,manufacturer=LENOVO'/>
<qemu:arg value='-smbios'/>
<qemu:arg value='type=17,manufacturer=LENOVO'/>
</qemu:commandline>
</domain>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment