7562f513bfd0cdf1a9c636ff78ae1b77890327c33bbbb779af93ffd0ea793413

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/10/2026, 14:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
setup_W8UL2hAS714_cracked.exe
Size 1.8MB
Sample261012-rl2mcasw2k
SHA256 7562f513bfd0cdf1a9c636ff78ae1b77890327c33bbbb779af93ffd0ea793413
MD5 c383dcf7e7e1408b6bf589280351c379
SHA1 815fca9cf12d2c7e3ac95cd8235bc19ff5eac6ce
SHA512 72ff4eb6faa18f3bd94726541b406da564b877db8eaf3d32d0f220068fa46fe0c3b591aab7222c6d839111f76c1d0c3258abdb4aa8fd048ce291b0e29866861f
SSDEEP 24576:UjM6nV8u3JyPs5o9l6gTdBBz/q33vB6/GEDZznqnCV8TrzA8FbQycQ42BSmgfvAq:SdRJQ+KS3fBAnMCKTQ8dyQ42BwvAq
TLSH
T1BC859DBDA3B08298D056E6B484836827F6B238655378FBEB93C04D611F567E04BB7731
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	setup_W8UL2hAS714_cracked.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	setup_W8UL2hAS714_cracked.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2380	setup_W8UL2hAS714_cracked.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2380	setup_W8UL2hAS714_cracked.exe

C:\Users\Admin\AppData\Local\Temp\setup_W8UL2hAS714_cracked.exe
"C:\Users\Admin\AppData\Local\Temp\setup_W8UL2hAS714_cracked.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2380

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

redirect[1].png

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\G2QQ8LWO\redirect[1].png
Size 420B
SHA256 33700861a1f25447543489d0100f301296e4fb95cd80ed8f589d58ba25db49e1
MD5 876193fbda46a44fe8dd2a77e3435c82
SHA1 02fe26f03665cda650b63a147d10ed53cf17815f
SHA512 51d26b5a4c907ece7668abedea9cecf8c028f2fffc4e16a7f36f405fb2d10d9f5b2e8916b0b967ccf4b67ee00a3a3764aca46f1525c2103a4a2f18554dadf97d
TLSH
T11DE0F1C7E5A138FAF83C7E82F1650663F45F0E80B6132E1E8C13DC614A51A7C858967C
MD5 SHA1 SHA512 TLSH

Submit Download