e839d72d6c03b1b08a3f01d8ebd907e3c96ebe8fc576f928270635b6636a41cc

Analysis

max time kernel
150s
max time network
135s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/10/2026, 12:19

Target
clickfix.exe
Size 41.1MB
Sample261003-phn6qszves
SHA256 e839d72d6c03b1b08a3f01d8ebd907e3c96ebe8fc576f928270635b6636a41cc
MD5 8a9f47151a6546a78373185317473356
SHA1 169fbe6a4c4a371c4b3f5c1180e058beecd1403d
SHA512 3af3a76bf049b95c64953550de0da971b1ae5c62c6af4f09ad1ff47804ce27f768fd56eaf41e397df6f8a6cbaa63a865f86780ab6011e91e96cddf566f48ce5a
SSDEEP 393216:MsZsAhbPsslhazMNcxjE8qD3AsM/Dz3fo3vnR4sYblbjrON:MY4ocZYYg
TLSH
T179972963F8D21A94D8EEC170D6728137BBA178690B7C13D70690E3241F3BBE09AB6755
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	clickfix.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	clickfix.exe

C:\Users\Admin\AppData\Local\Temp\clickfix.exe
"C:\Users\Admin\AppData\Local\Temp\clickfix.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:4500

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact