4037ad9024e86c845bdcd41b14472780e0934d4a2803cfbbfa6c2c892389dce6

Analysis

max time kernel
148s
max time network
114s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/08/2026, 17:37

Target
Email Grabber.exe
Size 522KB
Sample260822-v7fhsasscy
SHA256 4037ad9024e86c845bdcd41b14472780e0934d4a2803cfbbfa6c2c892389dce6
MD5 2566673d38015febccad57a23e9d524f
SHA1 bfa03e66f10ad7eb347cfaba0d92a8f5b39c4ad6
SHA512 c2f5b2db814f00080bc20d2573cc32b8c4b3a9d471ccc0945effe8923d0da655ce5d10ed50aece93060de2a9faf421697cf29f69a45b370eebeb270e47db78ce
SSDEEP 12288:2vU0sRoBXZ8ZJVv6fVYRZmEqnTpYb4Q2+:2JVVZ8NCfVYRZmEMTpYb4b+
TLSH
T1D8B46BA2639227FCC1E6C374C005362CF6A23F55462996DA825AF7614F376886F3EF50
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Checks for VirtualBox DLLs, possible anti-VM trick 1 TTPs 1 IoCs

Certain files are specific to VirtualBox VMs and can be used to detect execution in a VM.

System Information Discovery

description	ioc	Process
File opened (read-only)	\??\VBoxMiniRdrDN	Email Grabber.exe

C:\Users\Admin\AppData\Local\Temp\Email Grabber.exe
"C:\Users\Admin\AppData\Local\Temp\Email Grabber.exe"
1⤵
- Checks for VirtualBox DLLs, possible anti-VM trick
PID:3288

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact