3faeff48694025078e4b680229ecd8636ab363b6badb460f298d372040faf4b3

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 01:47

Target
3faeff48694025078e4b680229ecd8636ab363b6badb460f298d372040faf4b3.exe
Size 2.6MB
Sample260930-b7tkvsxgph
SHA256 3faeff48694025078e4b680229ecd8636ab363b6badb460f298d372040faf4b3
MD5 c217f93f6933838596a868901075f54f
SHA1 6dc19d081ac22e3efc6c25463bce69c3154c4d0b
SHA512 481958454e4547852f18ff53ddedd9101d860be6cb203e784c253c66cf50b40c4bed94392639e6e4d8b35f776efe6afea826d33a72195cdf4f0dd184c94e9efb
SSDEEP 49152:o8v5Lkm0UQFAqdTtJbyF5YRvlOYw1qCN5wGpGiD78l:ZobeGlOYsMGpGQ78l
TLSH
T1A0C56B56EAB9E5D0C69FA1788806890FD7F2B8242DB0835F81604B4E4F776A14F1E377
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	3faeff48694025078e4b680229ecd8636ab363b6badb460f298d372040faf4b3.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	3faeff48694025078e4b680229ecd8636ab363b6badb460f298d372040faf4b3.exe

C:\Users\Admin\AppData\Local\Temp\3faeff48694025078e4b680229ecd8636ab363b6badb460f298d372040faf4b3.exe
"C:\Users\Admin\AppData\Local\Temp\3faeff48694025078e4b680229ecd8636ab363b6badb460f298d372040faf4b3.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:5040

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact