424ab6ca20b47eeffe34c1f1ec3212f1db44aa022f5d55cc46def671b4d79300

Analysis

max time kernel
149s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/10/2026, 12:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
zapret-discord-youtube-1.10.2/DiscordFix.exe
Size 7.4MB
Sample261020-pxvbasbe25
SHA256 424ab6ca20b47eeffe34c1f1ec3212f1db44aa022f5d55cc46def671b4d79300
MD5 2d50a0bab1b34a22d52dad944b2c02a0
SHA1 8d11b2ebbbc8a7969249d583e5073e02310b8dbd
SHA512 ff19cc38a331993c8f08514b11cae77a07a169cb96a36da6d1a47007486e167e89b5fe4819632f1f76c4ff436df9769f577347f080833cff7eafc707344f9b05
SSDEEP 98304:foh4ouOzTf41gxc9sCJ2+XMpTcuquHdXC3vEFRCMfwxVsO/yBRKzkk:hezT4uAocxC5SEDqm
TLSH
T10076F123A9516778C05AD1354622D022F762BC583F2593F37A8CB2783B737E49A79BC1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

Malware Config

Signatures

Looks for VirtualBox executables on disk 2 TTPs 2 IoCs

File and Directory Discovery

T1083

Virtualization/Sandbox Evasion

T1497

description	ioc	Process
File opened (read-only)	C:\Windows\System32\VBoxService.exe	DiscordFix.exe
File opened (read-only)	C:\Windows\System32\VBoxTray.exe	DiscordFix.exe

C:\Users\Admin\AppData\Local\Temp\zapret-discord-youtube-1.10.2\DiscordFix.exe
"C:\Users\Admin\AppData\Local\Temp\zapret-discord-youtube-1.10.2\DiscordFix.exe"
1⤵
- Looks for VirtualBox executables on disk
PID:3648

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

File and Directory Discovery

T1083

Virtualization/Sandbox Evasion

T1497

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads