af737c683a39db8185188d17110de1ce172c8c99f0d2bd8163a524ad536e2b0d

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/08/2026, 12:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
af737c683a39db8185188d17110de1ce172c8c99f0d2bd8163a524ad536e2b0d.exe
Size 18KB
Sample260814-pxhmhabp21
SHA256 af737c683a39db8185188d17110de1ce172c8c99f0d2bd8163a524ad536e2b0d
MD5 fe1f31bcabf68d6e3518776ce2882385
SHA1 bea5c18c23966985aaf32d085aff2bfeb34babf4
SHA512 642631f1b0a9a2e5bb61f99210cb2ad9fd1ac511e3e8ae8b45a7624b93fd5c5b64987b1b88b26e7b2622e7125c77d18d0a6f4cf76f8f8318d1b0810b6069d4f7
SSDEEP 192:T4joPWLtaBjXkQtcdZGf1NJvW6qlsTOAfahT/9h55tffgFUCDzeWJYWTLDWfmgB:TVPWBcX5dftOlqOAObfKZaWJYWzWfO
TLSH
T186822982BB960DF9E8B6457180621E26EE7FBF240733F75F036041361DB9741A857B8A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

persistence

Malware Config

Signatures

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000\Software\Microsoft\Windows\CurrentVersion\Run\MicrosoftEdgeUpdate = "C:\\Users\\Admin\\AppData\\Local\\Temp\\af737c683a39db8185188d17110de1ce172c8c99f0d2bd8163a524ad536e2b0d.exe"	af737c683a39db8185188d17110de1ce172c8c99f0d2bd8163a524ad536e2b0d.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3611646547-550105268-947503007-1000\Software\Microsoft\Windows\CurrentVersion\Run\MicrosoftEdgeUpdate = "C:\\Users\\Admin\\AppData\\Local\\Temp\\af737c683a39db8185188d17110de1ce172c8c99f0d2bd8163a524ad536e2b0d.exe"	af737c683a39db8185188d17110de1ce172c8c99f0d2bd8163a524ad536e2b0d.exe

C:\Users\Admin\AppData\Local\Temp\af737c683a39db8185188d17110de1ce172c8c99f0d2bd8163a524ad536e2b0d.exe
"C:\Users\Admin\AppData\Local\Temp\af737c683a39db8185188d17110de1ce172c8c99f0d2bd8163a524ad536e2b0d.exe"
1⤵
- Adds Run key to start application
PID:2716

C:\Users\Admin\AppData\Local\Temp\af737c683a39db8185188d17110de1ce172c8c99f0d2bd8163a524ad536e2b0d.exe
C:\Users\Admin\AppData\Local\Temp\af737c683a39db8185188d17110de1ce172c8c99f0d2bd8163a524ad536e2b0d.exe
1⤵
- Adds Run key to start application
PID:4788

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads