Analysis
- user interaction
yes - max time kernel
103s - max time network
98s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
25/08/2026, 03:10
General
- Target 4jOh96kFEuu6_patched.exe
- Size 516KB
- Sample260825-dn8lsawemb
- SHA256 682e8f15cbc46b3bc6cf39a2be0696c5f080ca9eb9addcc98fab5ff39ac1b7f3
Score
4/10
Malware Config
Signatures
- Checks for VirtualBox DLLs, possible anti-VM trick 1 TTPs 2 IoCs
Certain files are specific to VirtualBox VMs and can be used to detect execution in a VM.
Processes
-
C:\Users\Admin\AppData\Local\Temp\4jOh96kFEuu6_patched.exe"C:\Users\Admin\AppData\Local\Temp\4jOh96kFEuu6_patched.exe"1⤵
- Checks for VirtualBox DLLs, possible anti-VM trick
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
-
C:\Users\Admin\AppData\Local\Temp\4jOh96kFEuu6_patched.exe"C:\Users\Admin\AppData\Local\Temp\4jOh96kFEuu6_patched.exe"1⤵
- Checks for VirtualBox DLLs, possible anti-VM trick