48412f00ea743fec518c5d8b33be27bf2655c40deb22c40515b89a1f88620fb1

Analysis

max time kernel
148s
max time network
113s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/07/2026, 19:54

Target
48412f00ea743fec518c5d8b33be27bf2655c40deb22c40515b89a1f88620fb1.exe
Size 524KB
Sample260724-ym23tssvcx
SHA256 48412f00ea743fec518c5d8b33be27bf2655c40deb22c40515b89a1f88620fb1
MD5 aedde94cce7dbecd367fe4dbd2772af5
SHA1 924c64cad412144225973816d904519e76e949a2
SHA512 eaeed2e5264ff10f4016e0b991ccbeaa235a1e6637c16e46e9f710045c1c4d28ee632e15190e68424149388eec02454a004a5218328f9625f89ce6acbf07d64f
SSDEEP 12288:+w3YFZA4UNLerpmkLn3KhntoTAP9gIXxYCZ:SFZARLerp/Ln3wtokWOJ
TLSH
T17CB46BA3639627FCC1E2C374C015362CF6613F9586298696915AF7214F37A88AF3EF50
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Checks for VirtualBox DLLs, possible anti-VM trick 1 TTPs 1 IoCs

Certain files are specific to VirtualBox VMs and can be used to detect execution in a VM.

System Information Discovery

description	ioc	Process
File opened (read-only)	\??\VBoxMiniRdrDN	48412f00ea743fec518c5d8b33be27bf2655c40deb22c40515b89a1f88620fb1.exe

C:\Users\Admin\AppData\Local\Temp\48412f00ea743fec518c5d8b33be27bf2655c40deb22c40515b89a1f88620fb1.exe
"C:\Users\Admin\AppData\Local\Temp\48412f00ea743fec518c5d8b33be27bf2655c40deb22c40515b89a1f88620fb1.exe"
1⤵
- Checks for VirtualBox DLLs, possible anti-VM trick
PID:5644

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact