3ad3b75ea90fb2a47d1acc193c7de84d66866daae3919ed0c4582b8017aadf16

Analysis

max time kernel
149s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/10/2026, 12:41

Target
Loader.exe
Size 148KB
Sample261001-pwtclsvbqa
SHA256 3ad3b75ea90fb2a47d1acc193c7de84d66866daae3919ed0c4582b8017aadf16
MD5 4de63d0499be4f5e9a41909fc82ba17f
SHA1 ec333e8b20e1ce163d1440a3421fcc55f96301e2
SHA512 1b7464e058f224d40678e274df37bbe1439029fcb2f68ec7873c1fb78c776ce1c2f8835cd0f65924c80bfefecd5d28245a063c0a6b118f43ce5a365609674d61
SSDEEP 3072:AqeXA/4yIbHkNPN+6H6xCYOigUE265/J/:AvdHkNFdaxmMEfJ
TLSH
T157E33B07A2A851BDE1B7D679CD924D41FB7378598B71A7CF03504AB60E63BD0AE39302
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Loader.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Loader.exe

C:\Users\Admin\AppData\Local\Temp\Loader.exe
"C:\Users\Admin\AppData\Local\Temp\Loader.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:2072

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact