682e8f15cbc46b3bc6cf39a2be0696c5f080ca9eb9addcc98fab5ff39ac1b7f3

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/08/2026, 03:10

Target
4jOh96kFEuu6_patched.exe
Size 516KB
Sample260825-dn8lsawemb
SHA256 682e8f15cbc46b3bc6cf39a2be0696c5f080ca9eb9addcc98fab5ff39ac1b7f3
MD5 8d958e443c7aae821fd3a39c2074cfe8
SHA1 f117ed82c832a9af366cb7e284d04a195d9d91e9
SHA512 4200cb876240d7a7083a678cd84d4f26233c8cf70285ae0ffded54e7c52dfac8b126de8d8f31dbbda3f407723c7c59884689706b7c9380b786bba608264bdeea
SSDEEP 6144:N85NxmtFUXc4ZTfW1rN4cVZHkFbfHYy9todwcjBYw/9cCE/FxDkkDqFIXNvK:UNxMmcZ1rNPro4y9lsjkDkJuXNvK
TLSH
T100B46BA2A39227FCC1E6C3748016362DF6703F51462986A6415AF7211F37A8CAF7EF54
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Checks for VirtualBox DLLs, possible anti-VM trick 1 TTPs 1 IoCs

Certain files are specific to VirtualBox VMs and can be used to detect execution in a VM.

System Information Discovery

description	ioc	Process
File opened (read-only)	\??\VBoxMiniRdrDN	4jOh96kFEuu6_patched.exe

C:\Users\Admin\AppData\Local\Temp\4jOh96kFEuu6_patched.exe
"C:\Users\Admin\AppData\Local\Temp\4jOh96kFEuu6_patched.exe"
1⤵
- Checks for VirtualBox DLLs, possible anti-VM trick
PID:4072

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact