b1719c66085e6fe1626451f8914bd5ba9d48561e892f4669595ebf2acfbda0bc

Analysis

user interaction
yes
max time kernel
148s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 12:53

Target
b1719c66085e6fe1626451f8914bd5ba9d48561e892f4669595ebf2acfbda0bc.exe
Size 522KB
Sample260924-p4rtravxev
SHA256 b1719c66085e6fe1626451f8914bd5ba9d48561e892f4669595ebf2acfbda0bc
MD5 7eff45f4d1793ea1ca5e6b6db0d3054b
SHA1 5784e9fc614b4c2908a84d7e4ccc5e3b158c0c4d
SHA512 0611c8e379afaba35f84720954b3f5e19913d2dfac9b01f75601552d8bd19f4728c073898096d20b400b5c2b4a572cdb8fc1b9f787d67a3da8e27b2f18f3b7a6
SSDEEP 12288:HE8N/nKj0DQuk2g6iJK3Jbsj/6ye6pynGeADSdE:tnlDrZiJK3ZsjSnvgDX
TLSH
T159B46CE2A39227FCC1A6C374C015362CF6613F51462986E6525AF7214F37B88AF7EB44
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Checks for VirtualBox DLLs, possible anti-VM trick 1 TTPs 1 IoCs

Certain files are specific to VirtualBox VMs and can be used to detect execution in a VM.

System Information Discovery

description	ioc	Process
File opened (read-only)	\??\VBoxMiniRdrDN	b1719c66085e6fe1626451f8914bd5ba9d48561e892f4669595ebf2acfbda0bc.exe

C:\Users\Admin\AppData\Local\Temp\b1719c66085e6fe1626451f8914bd5ba9d48561e892f4669595ebf2acfbda0bc.exe
"C:\Users\Admin\AppData\Local\Temp\b1719c66085e6fe1626451f8914bd5ba9d48561e892f4669595ebf2acfbda0bc.exe"
1⤵
- Checks for VirtualBox DLLs, possible anti-VM trick
PID:4948

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact