38837370c828dc0e65b86ff6cc4587e8dda001c0110ecc53897a9610f3d8df76

Analysis

max time kernel
150s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 17:50

Target
Launcher.exe
Size 616KB
Sample261027-wes4vaez61
SHA256 38837370c828dc0e65b86ff6cc4587e8dda001c0110ecc53897a9610f3d8df76
MD5 50b3d08cf1be2f7ca56b4c98a758b090
SHA1 d20e8499b23cb0b58beedd9d1edd1f383504332f
SHA512 478fe54a66be009238c28446d20e59f64567ed590b6526fba0e1c0d39ea822a9a9f2fd7eab4204226e5a216bf41d15cd2e4243458bf85ff3cf8bc21476fa114c
SSDEEP 12288:xNQyQY9vxt7q4I9MABnJiGlRVPCZTJdE6ZiWFu2yzREc4I2qyIRXp9gbskMFky8o:ka98nQQp
TLSH
T174D41962A74369C0EE03C036FC0B524B97BEBF510414A935152A9E413FB4D9BB9AF71B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Checks for VirtualBox DLLs, possible anti-VM trick 1 TTPs 1 IoCs

Certain files are specific to VirtualBox VMs and can be used to detect execution in a VM.

System Information Discovery

description	ioc	Process
File opened (read-only)	\??\VBoxMiniRdrDN	Launcher.exe

C:\Users\Admin\AppData\Local\Temp\Launcher.exe
"C:\Users\Admin\AppData\Local\Temp\Launcher.exe"
1⤵
- Checks for VirtualBox DLLs, possible anti-VM trick
PID:4284

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact