f474d2a28cae8545b2b3015e4a737c244ef70726fab3e4620c7b8cfdb45e8a93

Analysis

max time kernel
899s
max time network
506s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/08/2026, 15:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
TraceX.exe
Size 5.7MB
Sample260824-snbdlsv1cs
SHA256 f474d2a28cae8545b2b3015e4a737c244ef70726fab3e4620c7b8cfdb45e8a93
MD5 8fc24ba2ed51fe0e83240684884f3d76
SHA1 957df59eb86340ec8fc6edc4878ddc1acf853813
SHA512 165b3292c7c4ae4710e40082d950302221f510493abc476f42e3a6e301c5cfbc212d4df6b21481af5beaf38848c9dc47d6e19d2192f9c4b4e932cf7644293e29
SSDEEP 49152:DY05y8Dl3DdPjan0hT774wdQOsP3xA0E1m0Azw/rc/YVuL/cYfHXxr1Opqj9bVr2:DYY7AOsJiqYAZfIqbFnn+
TLSH
T129569E07F79182ECC05EC0748356A233AB63F8890736B3EB6B844A216F56BA05F5D75D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 11 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily	TraceX.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	TraceX.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer	TraceX.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardVersion	TraceX.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BIOSVendor	TraceX.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BIOSVersion	TraceX.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	TraceX.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	TraceX.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemVersion	TraceX.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardProduct	TraceX.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	TraceX.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
5836	TraceX.exe
5836	TraceX.exe
5836	TraceX.exe
5836	TraceX.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5836	TraceX.exe

C:\Users\Admin\AppData\Local\Temp\TraceX.exe
"C:\Users\Admin\AppData\Local\Temp\TraceX.exe"
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
PID:5836

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1292

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:3992

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads