9ef647a3c5ccfd56d445e0945ec4d6ba572e97a761327571daed1d8509d3a6c2

Analysis

max time kernel
148s
max time network
141s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/08/2026, 16:08

Target
1488.exe
Size 516KB
Sample260814-tle5fsxybs
SHA256 9ef647a3c5ccfd56d445e0945ec4d6ba572e97a761327571daed1d8509d3a6c2
MD5 be10ff429d10bffa8833aa8f5d90d40e
SHA1 53d39d6c2ed61aca817332ab274c89c32383f3af
SHA512 74c82216304c49f9ae33023f561895725ece12bf168b7b64274204b52a3b4854808e62a10fcfbb768ed64436a9bfa3a129db974396c933c6b0be8ee29955beca
SSDEEP 6144:f0c8Ql7rRWjUbvuRjrcP37rs5zlGW68NL+bR9BMKFJiCbh5Tnx8hEZaA:f0+nGQvuf5zlh6KL+7yKrbbjeWZ
TLSH
T14AB46BE3A39627FCC1A6C37480163A2CF6613F65462A4696925AF7210F3768C6F3DF50
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Checks for VirtualBox DLLs, possible anti-VM trick 1 TTPs 1 IoCs

Certain files are specific to VirtualBox VMs and can be used to detect execution in a VM.

System Information Discovery

description	ioc	Process
File opened (read-only)	\??\VBoxMiniRdrDN	1488.exe

C:\Users\Admin\AppData\Local\Temp\1488.exe
"C:\Users\Admin\AppData\Local\Temp\1488.exe"
1⤵
- Checks for VirtualBox DLLs, possible anti-VM trick
PID:916

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact