64dbec53e41358a66ad5049a57747427471589d449097cff6fa8f9596f3d9dcf

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/08/2026, 22:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
64dbec53e41358a66ad5049a57747427471589d449097cff6fa8f9596f3d9dcf.exe
Size 351KB
Sample260825-2gdptser7w
SHA256 64dbec53e41358a66ad5049a57747427471589d449097cff6fa8f9596f3d9dcf
MD5 16ef07678a7497c3735ff5c7e58f5f52
SHA1 6a9723a6b7e06e0e7a21f0948d35b5166a2d7e56
SHA512 5a6aeecc5ea9659eb42009a3c4c50f79b87cc4df097a06a1c9fd250653aa8f91ed1c0382b883c63bfd8dc97466ed604b69cf689d10e699c4473a91b02e37b6eb
SSDEEP 3072:rLic/DjKK+hcH4MnIQfvei1xq8NFRahREbj+z9QSe5N5w33hNR7Gp9hNjsV0:rLiED6whPw4F
TLSH
T1CC74A94553FED10AF1F29B34597947E62E32BC91AF31D94F6B00720E19B1F50EA26B22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	64dbec53e41358a66ad5049a57747427471589d449097cff6fa8f9596f3d9dcf.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	64dbec53e41358a66ad5049a57747427471589d449097cff6fa8f9596f3d9dcf.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1856	64dbec53e41358a66ad5049a57747427471589d449097cff6fa8f9596f3d9dcf.exe

C:\Users\Admin\AppData\Local\Temp\64dbec53e41358a66ad5049a57747427471589d449097cff6fa8f9596f3d9dcf.exe
"C:\Users\Admin\AppData\Local\Temp\64dbec53e41358a66ad5049a57747427471589d449097cff6fa8f9596f3d9dcf.exe"
1⤵
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx
PID:1856

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads