5717fd058cc99373796da36609d78e0ca7698de3ea6e4ce8e07bf48d1e484e8d

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/08/2026, 09:27

Target
lnHIYM2hnAsJ.exe
Size 510KB
Sample260818-lev84azzfv
SHA256 5717fd058cc99373796da36609d78e0ca7698de3ea6e4ce8e07bf48d1e484e8d
MD5 00e235882d3b67154a633ec20ea1c890
SHA1 93d08500d4a1794ecf7406971f1166a566c58077
SHA512 90b57952011e6e99e3f4d6cded5b3885132f25d17ca30bc28e53437b32993c797576203bb078aef2ffc54b3c16da9dd1de7c8e6d6af05925f1b06d2be8e24819
SSDEEP 6144:Xx1oqNIHu0MbdrdGRivlA4KujdX8ZS86yEfTTYyoFFxbtTN4qXHm/SQQsuEUATlZ:h1n+MprdzlACd0HEnYfFztOqCHTlZ
TLSH
T10DB47BA3A39227FCC1A6C374C011362CF5713F65562986A6865AF7210F37A886F7EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Checks for VirtualBox DLLs, possible anti-VM trick 1 TTPs 1 IoCs

Certain files are specific to VirtualBox VMs and can be used to detect execution in a VM.

System Information Discovery

description	ioc	Process
File opened (read-only)	\??\VBoxMiniRdrDN	lnHIYM2hnAsJ.exe

C:\Users\Admin\AppData\Local\Temp\lnHIYM2hnAsJ.exe
"C:\Users\Admin\AppData\Local\Temp\lnHIYM2hnAsJ.exe"
1⤵
- Checks for VirtualBox DLLs, possible anti-VM trick
PID:1252

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact