888a1bff4bdf1cf0b23fc9079715141621f5d7e775d32445f40f290af7350752

Analysis

max time kernel
149s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 19:51

Target
PlagueRust.exe
Size 744KB
Sample260930-yk2dhszsh1
SHA256 888a1bff4bdf1cf0b23fc9079715141621f5d7e775d32445f40f290af7350752
MD5 9dc80234ff53a9a60a198993cd90c599
SHA1 23ea6097583d794ae93620ff103e1af62706d5ef
SHA512 1b0ca87e1e46173714311fbdc4dd3011b920858feeb3f4d73feea20ab0fdb9b93801be0a8cbdafe5c306c2566c84bddfbc1492bf74a6c5951967195cbf539bc2
SSDEEP 12288:T3MXQ/zRrKhLUyTcMgEXJ1wo6FQI6EgtQo8UWYgeWYg955/155/WeNBnDhN3PpoY:YXQ/zRrKy9MRZ1X6FQI6ptQo8NNBnDhl
TLSH
T104F49D5AAAF501E9D07AE034DA969307FBB57C400B218AC733D46A5C2FF35E45EBA311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	PlagueRust.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	PlagueRust.exe

C:\Users\Admin\AppData\Local\Temp\PlagueRust.exe
"C:\Users\Admin\AppData\Local\Temp\PlagueRust.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:1884

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact