Analysis
- user interaction
yes - max time kernel
148s - max time network
140s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
19/08/2026, 13:27
General
- Target BBi7rkDtISweZy4k.exe
- Size 20.0MB
- Sample260819-qqa5hsxtdv
- SHA256 c74a1ec988a67d23bb32989e406b8b48e9cdb9d39a1472d1d2994c260019d908
Malware Config
Signatures
- Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
- Checks BIOS information in registry 2 TTPs 2 IoCs
BIOS information is often read in order to detect sandboxing environments.
- Checks whether UAC is enabled 1 TTPs 1 IoCs
- Suspicious behavior: EnumeratesProcesses 15 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\BBi7rkDtISweZy4k.exe"C:\Users\Admin\AppData\Local\Temp\BBi7rkDtISweZy4k.exe"1⤵
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
- Checks BIOS information in registry
- Checks whether UAC is enabled
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1672-1-0x0000000140000000-0x0000000142458000-memory.dmp
memory/1672-0-0x0000000140000000-0x0000000142458000-memory.dmp
memory/1672-2-0x0000000140000000-0x0000000142458000-memory.dmp
memory/1672-3-0x0000000140000000-0x0000000142458000-memory.dmp
memory/1672-4-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-578-0x0000000002C60000-0x000000000312A000-memory.dmp
memory/1672-577-0x0000000002C60000-0x000000000312A000-memory.dmp
memory/1672-580-0x0000000002C60000-0x000000000312A000-memory.dmp
memory/1672-576-0x0000000002C60000-0x000000000312A000-memory.dmp
memory/1672-582-0x0000000002C60000-0x000000000312A000-memory.dmp
memory/1672-581-0x0000000002C60000-0x000000000312A000-memory.dmp
memory/1672-672-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-671-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-670-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-669-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-668-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-667-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-673-0x0000000002C60000-0x000000000312A000-memory.dmp
memory/1672-676-0x0000000140000000-0x0000000142458000-memory.dmp
memory/1672-666-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-665-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-664-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-663-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-662-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-661-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-660-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-659-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-658-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-657-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-656-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-655-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-654-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-653-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-652-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-651-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-650-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-649-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-648-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-647-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-646-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-645-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-644-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-643-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-642-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-641-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-640-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-639-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-638-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-637-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-636-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-635-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-634-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-633-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-632-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-631-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-630-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-629-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-628-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-627-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-626-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-625-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-624-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-623-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-622-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-621-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-620-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-619-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-618-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-617-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-616-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-615-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-614-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-613-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-612-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-611-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-610-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-609-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-608-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-607-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-606-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-605-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-604-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-603-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-602-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-601-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-600-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-599-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-598-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-597-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-596-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-595-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-594-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-593-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-592-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-591-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-590-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-589-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-588-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-587-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-586-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-585-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-584-0x0000000000540000-0x0000000000541000-memory.dmp
memory/1672-583-0x0000000140000000-0x0000000142458000-memory.dmp
memory/1672-579-0x0000000002C60000-0x000000000312A000-memory.dmp