0345370e70311cfab06adb18c67785c3f8377f35a66b54d0619d620434165373

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 07:13

Target
windows_amd64.exe
Size 4KB
Sample261002-h2d2jsvfre
SHA256 0345370e70311cfab06adb18c67785c3f8377f35a66b54d0619d620434165373
MD5 91ade8fc3cead6276f054d564b5a321d
SHA1 2530c7d2c59b8b12e27d8a2d4ff382659c5d5f14
SHA512 879b55144f3f071f353f76c9b8af78017b6e95ca27fcb7f4ca97896f948649b09767659849a72f35d695edb8eb74701590fd1ded8898eeda601bfa1351e99c75
SSDEEP 48:6IIF9BlQaexYangZ07An0cF5uduvxRxUjbON9XM/ge93ahr0/:y9BOaMYaKd0cF50uDxUOvXeg
TLSH
T1D591D74170B989E7E85C41BF4C0FB8A0B919780A41C483A70338A5953E3A57BF57CB0E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	windows_amd64.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	windows_amd64.exe

C:\Users\Admin\AppData\Local\Temp\windows_amd64.exe
"C:\Users\Admin\AppData\Local\Temp\windows_amd64.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:4384

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact