6065cb819a2f8192c7a0ab5979f4aa581bb694b1e0642703428960efcab80273

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 16:20

Target
file.exe
Size 523KB
Sample260730-ttdxcsvzfs
SHA256 6065cb819a2f8192c7a0ab5979f4aa581bb694b1e0642703428960efcab80273
MD5 3e12fb6f0be80b6aa93ed29b656890a0
SHA1 7a507267c06f694d9263ccb3810d25ccc2a06a45
SHA512 1384bb47acd6adb89eb7e7e9e75a06330d76a3cdf1cae0a4499e8e812c90d6ea5142d5fc99c59f098f7eef0b41144a087c070567b784d30f710c27f08e705667
SSDEEP 12288:PynBUZyQzf2e7tcKDwMYEYP0suFt+6rqoBtR:qnmyQzf2cce779XteoBt
TLSH
T11CB45BA2A39227FCC1A6C374C0163A2CF6713F65462986D6425AF7210F3768C6F7EB54
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Checks for VirtualBox DLLs, possible anti-VM trick 1 TTPs 1 IoCs

Certain files are specific to VirtualBox VMs and can be used to detect execution in a VM.

System Information Discovery

description	ioc	Process
File opened (read-only)	\??\VBoxMiniRdrDN	file.exe

C:\Users\Admin\AppData\Local\Temp\file.exe
"C:\Users\Admin\AppData\Local\Temp\file.exe"
1⤵
- Checks for VirtualBox DLLs, possible anti-VM trick
PID:5080

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact