60a9c3b3c4646fe500be18b409ca3f0408399f71515b8362c6e007269c34679d | Triage™

Login
Reports

Overview

overview

9

Static

static

3

loader.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

Target
loader.exe
Size 700KB
Sample260820-n1dmaawdkf
SHA256 60a9c3b3c4646fe500be18b409ca3f0408399f71515b8362c6e007269c34679d
MD5 3a70dc9a856afcf7c7d05f298deacb2f
SHA1 f581b282f06f3585c5c158d219cf8fe808aaa645
SHA512 eeeceb6dfd842afda5fe99b713d626e2d6368bed015aaf06182cb79f63929cc978b33704ed5fc616ef0b1de84146fef8099cbefd9fa2627c3890548c0cc41ac9
SSDEEP 12288:ECpp54PyJlwzW1EWwKPYK2xEXlBIoMQkdf65vw+/yiM0IVRKt:hp54PxzWxQKlXlBJMhdUvw+/yiM0IbK
TLSH
T1FAE49D1ABAA402F8D07BD079D987551BFA723C4913319AEB23F049751FA36E0DB7A710
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

defense_evasion discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

loader.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

19 signatures

30 seconds

defense_evasion discovery execution

Malware Config

Targets

- Target
  loader.exe
- Size 700KB
- SHA256 60a9c3b3c4646fe500be18b409ca3f0408399f71515b8362c6e007269c34679d
- MD5 3a70dc9a856afcf7c7d05f298deacb2f
- SHA1 f581b282f06f3585c5c158d219cf8fe808aaa645
- SHA512 eeeceb6dfd842afda5fe99b713d626e2d6368bed015aaf06182cb79f63929cc978b33704ed5fc616ef0b1de84146fef8099cbefd9fa2627c3890548c0cc41ac9
- SSDEEP 12288:ECpp54PyJlwzW1EWwKPYK2xEXlBIoMQkdf65vw+/yiM0IVRKt:hp54PxzWxQKlXlBJMhdUvw+/yiM0IbK
- TLSH
  T1FAE49D1ABAA402F8D07BD079D987551BFA723C4913319AEB23F049751FA36E0DB7A710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion discovery execution
- Enumerates VirtualBox registry keys
  defense_evasion
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
  defense_evasion
- Looks for VirtualBox Guest Additions in registry
  defense_evasion
- Looks for VMWare Tools registry key
  defense_evasion
- Looks for VMWare services registry key.
  defense_evasion
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryexecution

© 2018-2026

Terms | Privacy