4dfcaf1e4d0188e77b57255cd4798e8cd3edf78a5d61ae36c7c98c9e60748595

Analysis

max time kernel
147s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/09/2026, 15:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
4dfcaf1e4d0188e77b57255cd4798e8cd3edf78a5d61ae36c7c98c9e60748595.exe
Size 6.4MB
Sample260929-s2nabsvblf
SHA256 4dfcaf1e4d0188e77b57255cd4798e8cd3edf78a5d61ae36c7c98c9e60748595
MD5 cfa3bfb7bae2c79629be7fdbb50b579e
SHA1 7bff208478ec161144a4b50854dd29a20617e19c
SHA512 940919e7fca5eef53be5236d696582ec54a831e870264b3e30fc5945aa139afcbe132a25295288d217d017ae0b9c60c6ceb6fa2318ead27c636602332203b396
SSDEEP 49152:mVBKuCECnB4jLgcaVvr6BR/dnCyi5UHE6oGsTXdXSpI5M4sV2L59YmKQK1K6bfyi:mVMlHpGc2eUbZEO
TLSH
T1A5665A03FD6595E4C0ADD1718AB79212BB71BC484B2123D72B90F2382F76BD0ADB9758
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	4dfcaf1e4d0188e77b57255cd4798e8cd3edf78a5d61ae36c7c98c9e60748595.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	4dfcaf1e4d0188e77b57255cd4798e8cd3edf78a5d61ae36c7c98c9e60748595.exe

C:\Users\Admin\AppData\Local\Temp\4dfcaf1e4d0188e77b57255cd4798e8cd3edf78a5d61ae36c7c98c9e60748595.exe
"C:\Users\Admin\AppData\Local\Temp\4dfcaf1e4d0188e77b57255cd4798e8cd3edf78a5d61ae36c7c98c9e60748595.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:732

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

77EC63BDA74BD0D0E0426DC8F8008506

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
Size 330B
SHA256 d4453cfe93c4e225ae0ea82628e5a615fda673f5ae896dba698179fcdb9fc161
MD5 e381a1347210c441bd6ec639a6e88e00
SHA1 97d0622930ff4dc9527835fa927f9dfc055d9a88
SHA512 d5864da473b2211e0c0c5f29df6df58fe350f0e2d957c9d4555d5cfba593edab846f2560679bbf0007df4d4bfdfd7cced4fff4a4589d58b07e537f91956456e2
TLSH
T135E05E257BB44300E5730B3CE8639A45997773A7B902C79D1B3A448C4C6AF119D3372E
MD5 SHA1 SHA512 TLSH

Submit Download