75e4ecd67c2b5a664b2ce3180e50ab137d3450145ef37ca1c27e317f1802208a

Analysis

max time kernel
150s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/08/2026, 04:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
75e4ecd67c2b5a664b2ce3180e50ab137d3450145ef37ca1c27e317f1802208a.exe
Size 3.4MB
Sample260826-e23s5ayxbz
SHA256 75e4ecd67c2b5a664b2ce3180e50ab137d3450145ef37ca1c27e317f1802208a
MD5 f42241122b0d04356090ad75bb759145
SHA1 d80c96883f05edb8cee0282036aeca3304b9d51d
SHA512 dc8710e387059ca9c2342f62c21cf3be7298c60713d946e2f8b825d38f000d4f9abf48751ed8361ac18093199fc0c5ad0a6a1ccfa83295d193d24030bdf2dd64
SSDEEP 98304:81u+p0ocf5yeMvvNTXCw2kxIB5fwRz4+dCOIqcabXSnn:81u+CG3JseIB544+dCOBLXSnn
TLSH
T143F5DF51F3428190C5A99579CC1385A296327C89BF369A77380CFE263FB35F1AD3BA41
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	75e4ecd67c2b5a664b2ce3180e50ab137d3450145ef37ca1c27e317f1802208a.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	75e4ecd67c2b5a664b2ce3180e50ab137d3450145ef37ca1c27e317f1802208a.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4388	75e4ecd67c2b5a664b2ce3180e50ab137d3450145ef37ca1c27e317f1802208a.exe
4388	75e4ecd67c2b5a664b2ce3180e50ab137d3450145ef37ca1c27e317f1802208a.exe
4388	75e4ecd67c2b5a664b2ce3180e50ab137d3450145ef37ca1c27e317f1802208a.exe
4388	75e4ecd67c2b5a664b2ce3180e50ab137d3450145ef37ca1c27e317f1802208a.exe
4388	75e4ecd67c2b5a664b2ce3180e50ab137d3450145ef37ca1c27e317f1802208a.exe
4388	75e4ecd67c2b5a664b2ce3180e50ab137d3450145ef37ca1c27e317f1802208a.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
4388	75e4ecd67c2b5a664b2ce3180e50ab137d3450145ef37ca1c27e317f1802208a.exe
4388	75e4ecd67c2b5a664b2ce3180e50ab137d3450145ef37ca1c27e317f1802208a.exe
4388	75e4ecd67c2b5a664b2ce3180e50ab137d3450145ef37ca1c27e317f1802208a.exe
4388	75e4ecd67c2b5a664b2ce3180e50ab137d3450145ef37ca1c27e317f1802208a.exe

C:\Users\Admin\AppData\Local\Temp\75e4ecd67c2b5a664b2ce3180e50ab137d3450145ef37ca1c27e317f1802208a.exe
"C:\Users\Admin\AppData\Local\Temp\75e4ecd67c2b5a664b2ce3180e50ab137d3450145ef37ca1c27e317f1802208a.exe"
1⤵
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4388

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads