Analysis
- user interaction
yes - max time kernel
149s - max time network
140s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
01/10/2026, 16:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
retrac-e5452a309a4b58ce.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
General
- Target retrac-e5452a309a4b58ce.exe
- Size 381KB
- Sample261001-twvmws11fs
- SHA256 f3477cac92c7614ba1af91600f3d33d0643ace589f0f7ce4b7ccd31309e1435e
- MD5 b8c47656680b10db65296e177f0ad784
- SHA1 332f976fb022ec9a63fb46e1d197efe202f50580
- SHA512 067b1fd265259698bd5348b04aa9d4fc136f0647d87fe89d1682e7196aad6705ccbb1544978549618d660ff087acecff967dad0719db03f840258a783541799a
- SSDEEP 6144:vRFF4wQLzRNTmmoSZnNv/wDekEp8eKjky167pzD4jD2:vvKzRNTmmoSZnd/wKkQDcK
- TLSH T180840784D4A314F7C6FACE389763A54BF471B8D8423E0EF71A8CE4655106AE1F636E12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname retrac-e5452a309a4b58ce.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain retrac-e5452a309a4b58ce.exe - Suspicious behavior: EnumeratesProcesses 62 IoCs
pid Process 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe 3608 retrac-e5452a309a4b58ce.exe