a9df8dd4504a5c6cb743170a19ee289755fa5d443d39c8b16339f17036548dfb

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/05/2026, 22:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Setup.exe
Size 7.2MB
Sample260511-2bmqjsbs4s
SHA256 a9df8dd4504a5c6cb743170a19ee289755fa5d443d39c8b16339f17036548dfb
MD5 90cdfbb92359f82f8d730eb0929be068
SHA1 b3da3d9d31397b5d591cd93fb274894856654ff3
SHA512 b3ce50d4fff5592747c01fea3c41a7d735e3e465ae6f22664193ca23b11bc3a0ac43b61d0cc069bc70b94995993dee535fb012b4523697e342c0cdf0bc337c32
SSDEEP 196608:7creTsywo2UqQmf6bPoR7zSPjpzWklKMNH1QfV:4sbqPCbARfGRof
TLSH
T1DC762344B5CDD6F4C48B9BA02B0151CE74CE754B89FD1A693ECB8C22AAB0D7D447D3A2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Signatures

Checks for VirtualBox DLLs, possible anti-VM trick 1 TTPs 1 IoCs

Certain files are specific to VirtualBox VMs and can be used to detect execution in a VM.

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\VBoxMiniRdrDN	Setup.exe

C:\Users\Admin\AppData\Local\Temp\Setup.exe
"C:\Users\Admin\AppData\Local\Temp\Setup.exe"
1⤵
- Checks for VirtualBox DLLs, possible anti-VM trick
PID:4280

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4280-0-0x00007FF6507D0000-0x00007FF6512E9000-memory.dmp

Download