6ef60d18d177615ce7d72f3a6f8cd23d5454ac7b1c7239a2079eb3c06e532f2d

Analysis

max time kernel
149s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/09/2026, 20:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
6ef60d18d177615ce7d72f3a6f8cd23d5454ac7b1c7239a2079eb3c06e532f2d.exe
Size 4KB
Sample260926-yz43ys1t5k
SHA256 6ef60d18d177615ce7d72f3a6f8cd23d5454ac7b1c7239a2079eb3c06e532f2d
MD5 91d9bfdae5f20e73c2091b28c1b9f0e3
SHA1 4482bf658288c7f54b08c49c7b71e064099997ba
SHA512 123c61c9b8d95df5a50d498bfa9a91fd95a77bcb3d49d0519e3b36470e14a962aa2713339adb658aea8b22a8b2838cc38cdc008ff35cd9db375a6c5765e0def5
SSDEEP 48:6IIF9BlQaexggZD7An0cF5uduvxRxUjbON9XM/ge93ahr0/:y9BOaMBA0cF50uDxUOvXeg
TLSH
T1FC91C64270B989E7E85D45BB4C0FB8A4BD19750A41C483A70338A5A93F3957BF47CB0E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	6ef60d18d177615ce7d72f3a6f8cd23d5454ac7b1c7239a2079eb3c06e532f2d.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	6ef60d18d177615ce7d72f3a6f8cd23d5454ac7b1c7239a2079eb3c06e532f2d.exe

C:\Users\Admin\AppData\Local\Temp\6ef60d18d177615ce7d72f3a6f8cd23d5454ac7b1c7239a2079eb3c06e532f2d.exe
"C:\Users\Admin\AppData\Local\Temp\6ef60d18d177615ce7d72f3a6f8cd23d5454ac7b1c7239a2079eb3c06e532f2d.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:4192

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4192-0-0x0000028537D70000-0x0000028539A0D000-memory.dmp

Download