1dbb7ef9be4256e18f1d5b68fe9aa180b79f970ffc5440b3d0ba4ab06f41fb7d

Analysis

max time kernel
60s
max time network
41s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/07/2026, 05:37

Target
cmmd.exe
Size 524KB
Sample260717-gbedysft3t
SHA256 1dbb7ef9be4256e18f1d5b68fe9aa180b79f970ffc5440b3d0ba4ab06f41fb7d
MD5 c24997544c7c62f6264f60dc3775aea2
SHA1 780d43b25344f1b46154d628b7b626655715e0e1
SHA512 42e5ce1cce3159430137d88af271a3668057e4e9fcce71e9654b77a939ec4109bf13b28557c1b76ffc794ec5bdd7c1aa568869e4dfb17ad2e9dd9dfe28974a18
SSDEEP 6144:cWmKgRe/nGm/tvssbNAgXHKix0RmUtTO7zG3LnGyVJ8mtexwT18JRRK+PBl:cfKAePSgnx0kUI7KyTxwT12PBl
TLSH
T1F6B46BA3A39223FCC1A6C374C006362CF6613F6156294696919AF7214F37A8C6F7EF54
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Checks for VirtualBox DLLs, possible anti-VM trick 1 TTPs 1 IoCs

Certain files are specific to VirtualBox VMs and can be used to detect execution in a VM.

System Information Discovery

description	ioc	Process
File opened (read-only)	\??\VBoxMiniRdrDN	cmmd.exe

C:\Users\Admin\AppData\Local\Temp\cmmd.exe
"C:\Users\Admin\AppData\Local\Temp\cmmd.exe"
1⤵
- Checks for VirtualBox DLLs, possible anti-VM trick
PID:1256

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact