Analysis
- user interaction
yes - max time kernel
46s - max time network
49s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
18/04/2026, 02:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
V3beta.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
General
- Target V3beta.exe
- Size 6.2MB
- Sample260418-dbyaaaas8j
- SHA256 0ec41495e46412ad3ce21ed854182f9edcbc0260fdb36cec44e12ebeae884739
- MD5 51cee8b1c488dccb86140fd7c665ae63
- SHA1 4544c19b37c9fc47e35a802931c5b1f2cdad23c8
- SHA512 0cb2f76c2949d0e2740d471dbfa3e4d64d442fc91997a19b3d6741a4e8d7b73b15ca6be56e221a079ba48f35615a8ba806a5ca480c52a24b06bb1d51204a3d54
- SSDEEP 49152:1VdbcZiQ59a3EbEMUn6RVR4SME9ca+35SEGHK+/o+wiofnxaPKq5wMJn7q4TUEk5:1k2+Uns+GFOfnxiKE1TO8TIzVRJI
- TLSH T18866CF1AA6A501E8C0E7D5B88A16D933EA727C49033297DB16E08D573F27AF15F3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Malware Config
Signatures
- Checks for VirtualBox DLLs, possible anti-VM trick 1 TTPs 1 IoCs
Certain files are specific to VirtualBox VMs and can be used to detect execution in a VM.
ioc Process \??\VBoxMiniRdrDN V3beta.exe - Enumerates system info in registry 2 TTPs 6 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS V3beta.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer V3beta.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName V3beta.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSerialNumber V3beta.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BIOSVersion V3beta.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardProduct V3beta.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeSystemEnvironmentPrivilege 2260 V3beta.exe