acff38c20f19afa1c3318528dc1ba6d262f10870f95e053a4908c2a66889d8fd

Analysis

max time kernel
148s
max time network
115s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/07/2026, 00:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
byk4d5tg4nyo.exe
Size 80KB
Sample260712-allgpadw8x
SHA256 acff38c20f19afa1c3318528dc1ba6d262f10870f95e053a4908c2a66889d8fd
MD5 73873e23248337990f71a178c6080717
SHA1 04eb898c5643c0c072231c877a19dc94d5cdf0d5
SHA512 ce593a64a1d0cff196206e47deabf47a792e82c88630314938c67f55be445a0c46e069e4a6743edbd77613f8f3b7d62db3bcc086de3414f2272225ce5358c018
SSDEEP 1536:XKxU4Mgvsi3w2RYO9wU3TyZU9QHvti1mS:a7OuwMjyZ5HVimS
TLSH
T10B8339AFE8D041FCEC15D6798A669277C0B2FC462D76BA4F2B50DB052BD5B30671AB00
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	byk4d5tg4nyo.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	byk4d5tg4nyo.exe

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
3112	byk4d5tg4nyo.exe

C:\Users\Admin\AppData\Local\Temp\byk4d5tg4nyo.exe
"C:\Users\Admin\AppData\Local\Temp\byk4d5tg4nyo.exe"
1⤵
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
PID:3112

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3112-0-0x0000000000410000-0x000000000045D000-memory.dmp

Download

memory/3112-2-0x0000000000410000-0x000000000045D000-memory.dmp

Download