c9a81c15a982007cc2c543093cf950121e1b6763088843321444a858f140b96e

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/10/2026, 12:49

Target
2.exe
Size 608KB
Sample261018-p2e26sba67
SHA256 c9a81c15a982007cc2c543093cf950121e1b6763088843321444a858f140b96e
MD5 b11cde1c74198f44709c83107d04a971
SHA1 cde20afae3a109b6a8773b715260df9070af9c36
SHA512 7414830e700f356beaaf7bcbe62a412b20f3867d18a35bd525143e470e8f16ec7988c3934ace8910fff9491351e6248df580617af02695846af7a86624339466
SSDEEP 6144:bi1ndbrJA5nC2strI0zf6efXLc1PUsXSV7bBQGDDTaj/iKOL4F5wYB:b6BHtrz9/LcrXqdQGaj//fU
TLSH
T189D4C6E59793A4CAEB674136DC0B1A4AE4BEFC414948ED33150C9B1139B57FA0A9F30B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Checks for VirtualBox DLLs, possible anti-VM trick 1 TTPs 1 IoCs

Certain files are specific to VirtualBox VMs and can be used to detect execution in a VM.

System Information Discovery

description	ioc	Process
File opened (read-only)	\??\VBoxMiniRdrDN	2.exe

C:\Users\Admin\AppData\Local\Temp\2.exe
"C:\Users\Admin\AppData\Local\Temp\2.exe"
1⤵
- Checks for VirtualBox DLLs, possible anti-VM trick
PID:1984

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact