9675d4f49fd95a2038be7927a76d4df183ee02248987dc86d631a1fedbbd3f01

Analysis

max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/10/2026, 10:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9675d4f49fd95a2038be7927a76d4df183ee02248987dc86d631a1fedbbd3f01.exe
Size 652KB
Sample261014-mxrjasff82
SHA256 9675d4f49fd95a2038be7927a76d4df183ee02248987dc86d631a1fedbbd3f01
MD5 a1809d6ccd7a6698113861366fe3f925
SHA1 336537d23a49e6e12ffa87a991f8c0e4bf2d83dc
SHA512 3967f15c5597780745eaba3ab1040556698be5dfd973b11c91ea4309e1a8364cde7dd3ebfa1c0afdc72b4e6d25f6702ae7a41270dc96c72b6909ad38d2b2bb5d
SSDEEP 6144:wEiC1xJib7raMOMA9bB0gSZ1WnMfypE/vYF7cNxI:wbkHIraDzI1WnMmYvYF7cNxI
TLSH
T1D4E4E795A4EC3CDAF6B5057969B38121327AFE8151150B17392CB2301F32AE37E6E91F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	9675d4f49fd95a2038be7927a76d4df183ee02248987dc86d631a1fedbbd3f01.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	9675d4f49fd95a2038be7927a76d4df183ee02248987dc86d631a1fedbbd3f01.exe

C:\Users\Admin\AppData\Local\Temp\9675d4f49fd95a2038be7927a76d4df183ee02248987dc86d631a1fedbbd3f01.exe
"C:\Users\Admin\AppData\Local\Temp\9675d4f49fd95a2038be7927a76d4df183ee02248987dc86d631a1fedbbd3f01.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:2292

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

session.log

Path C:\Users\Admin\AppData\Local\PrinterCheck\session.log
Size 224B
SHA256 76948da73990410343b35df3cac2a48de9d0b5fc2dc30808d6bf4f8ca6118105
MD5 ce0c0f63400fc8b849671893957bd750
SHA1 80c3fe0cdcb8c29e392d29697307d35f6ade4bb7
SHA512 3803a85de11bfc97b9e38d1f04eda64d5d07b346fd09e306659e164db0c92173a453d8d89cc1e5c4f5119d92abb465b8b4b8c86675e360ad78ebf208a84c6641
TLSH
T121D09E42346A8801D2C419972529CACE86F2E075990669A873A8E7C0980CD1C985DC74
MD5 SHA1 SHA512 TLSH

Submit Download

memory/2292-7-0x00007FF7F0C80000-0x00007FF7F0D16000-memory.dmp

Download