c302d091a1d13d1599df882ca1fbd86c6d2dc6bb284075439310c89c444e90de

Analysis

max time kernel
148s
max time network
115s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/10/2026, 06:26

Target
KLLNMF.exe
Size 225KB
Sample261001-g67c8a1akb
SHA256 c302d091a1d13d1599df882ca1fbd86c6d2dc6bb284075439310c89c444e90de
MD5 8153fdf15c934a15c9a54bc505faa529
SHA1 9657133e9a4bba01e0a82dbd671b3001cd574758
SHA512 5c2524e81953527af4d1c498784bc839c0a13ae4de04ae5bac6be77c3c078c416e2d95b0acdb52de92658e2317cbbb268c5bc9f426e776abe2080d0b39cc3815
SSDEEP 3072:svaKrrR0udjN1z0v34OTmMMaj0aFfeqrxudGTYNbA7mqDs9EluP346DV:svaQrM82BRxdYZeuP346
TLSH
T1C2343B6BD25371FCD552C078A26A7222B771B53C87349EF703A2C3319E21AC06E79A75
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	KLLNMF.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	KLLNMF.exe

C:\Users\Admin\AppData\Local\Temp\KLLNMF.exe
"C:\Users\Admin\AppData\Local\Temp\KLLNMF.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:4852

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact