648186c187e08f6257116adfc3f5e64cb3ca330a925ff297fee45f1d6a0a60a4

Analysis

user interaction
yes
max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/09/2026, 15:07

Target
probe_suite.exe
Size 157KB
Sample260929-shrteatz4r
SHA256 648186c187e08f6257116adfc3f5e64cb3ca330a925ff297fee45f1d6a0a60a4
MD5 12565f581760e8bd793fe1bd51927961
SHA1 6510b9c21d0d917cadedc10aa4bcc026b871975b
SHA512 38cd393024ad5026d37edca4a7629dcabc52971bad3344799ce99c1815d560389bcbe9a2dc4cc22d3ff55ce26f8b0181ba911c9d63dc0ebadb9a804798671afc
SSDEEP 3072:doGSzvTxU0zZm7Xmk8HCvAoKC7i9QlyWtkcM1u8AhhYwyiasldtYvbg:doGqvrzZTF2g+i9Qlqu8EHxgM
TLSH
T160F36B45B3A900F6E173823C89614A51F772B8124B209BEF07A4537AAF737D15E3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	probe_suite.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	probe_suite.exe

C:\Users\Admin\AppData\Local\Temp\probe_suite.exe
"C:\Users\Admin\AppData\Local\Temp\probe_suite.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:4768

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact