441d557b5e779a9f50c8ed1aa0b287f608f111a140ec7468c20a3c16f1a70cd9

Analysis

max time kernel
148s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 23:19

Target
441d557b5e779a9f50c8ed1aa0b287f608f111a140ec7468c20a3c16f1a70cd9.exe
Size 518KB
Sample260809-3a2nrafj9x
SHA256 441d557b5e779a9f50c8ed1aa0b287f608f111a140ec7468c20a3c16f1a70cd9
MD5 7ccb53b3c7d2631949a59eafadbb6cab
SHA1 a452fa54c8b9eeb2319e17930c1bad6f95a35be0
SHA512 a8fdaddc83ae782f7307ee2043778e4af7563734b5fb8aa47d2d735b565b40d753f9ef7ff867740e20edf73ca58d54576c9d0da606f084b818f1bb30310308a8
SSDEEP 12288:RFgIMKmAe0zfZwuF9dYXUH9XtO4kU67OA4:RFUAe0V3F9dCqtO4kr7i
TLSH
T1D8B46BE2A39227FCC1E6C374C015362CF6603F5546298696929AF7214F37A8C6F7EB44
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Checks for VirtualBox DLLs, possible anti-VM trick 1 TTPs 1 IoCs

Certain files are specific to VirtualBox VMs and can be used to detect execution in a VM.

System Information Discovery

description	ioc	Process
File opened (read-only)	\??\VBoxMiniRdrDN	441d557b5e779a9f50c8ed1aa0b287f608f111a140ec7468c20a3c16f1a70cd9.exe

C:\Users\Admin\AppData\Local\Temp\441d557b5e779a9f50c8ed1aa0b287f608f111a140ec7468c20a3c16f1a70cd9.exe
"C:\Users\Admin\AppData\Local\Temp\441d557b5e779a9f50c8ed1aa0b287f608f111a140ec7468c20a3c16f1a70cd9.exe"
1⤵
- Checks for VirtualBox DLLs, possible anti-VM trick
PID:4332

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact