0c76e4c633b01ca41b286cc9491802624259fccbb3e70f08828dab365a68f0e5

Analysis

max time kernel
148s
max time network
116s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/10/2026, 12:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Lyre.exe
Size 2.1MB
Sample261003-prrm8aydme
SHA256 0c76e4c633b01ca41b286cc9491802624259fccbb3e70f08828dab365a68f0e5
MD5 fccaa469e5f928131f5b1b603d198798
SHA1 18e3fb9190c7a1846a559fb370a901bb6d3b27ba
SHA512 95a95c09adf0e81a51977f1521c5f84b0cbb8acf36e6cabc6e6fed96b99144b0e4238bdf9debf08b298a48d6a0d7970cbf03a743a65e95a4bb162feb6b8f7174
SSDEEP 24576:5JmgybBePfbdEbq3EFLtYk2h0dg8lyIMl1KEoson7cUIT5B+mUgpEaNv+:Cg0B4sfSk2h0dgzKEogL2
TLSH
T1C9A57C17A3D901F8E0FAD278CE56981AEB7274590771A7DF06D0416A0FAB6E04F7E312
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Lyre.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Lyre.exe

Suspicious use of SetWindowsHookEx 5 IoCs

pid	Process
4888	Lyre.exe
4888	Lyre.exe
4888	Lyre.exe
4888	Lyre.exe
4888	Lyre.exe

C:\Users\Admin\AppData\Local\Temp\Lyre.exe
"C:\Users\Admin\AppData\Local\Temp\Lyre.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
- Suspicious use of SetWindowsHookEx
PID:4888

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads