9675d4f49fd95a2038be7927a76d4df183ee02248987dc86d631a1fedbbd3f01

Analysis

max time kernel
148s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/10/2026, 10:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9675d4f49fd95a2038be7927a76d4df183ee02248987dc86d631a1fedbbd3f01.exe
Size 652KB
Sample261014-mxrjasff82
SHA256 9675d4f49fd95a2038be7927a76d4df183ee02248987dc86d631a1fedbbd3f01
MD5 a1809d6ccd7a6698113861366fe3f925
SHA1 336537d23a49e6e12ffa87a991f8c0e4bf2d83dc
SHA512 3967f15c5597780745eaba3ab1040556698be5dfd973b11c91ea4309e1a8364cde7dd3ebfa1c0afdc72b4e6d25f6702ae7a41270dc96c72b6909ad38d2b2bb5d
SSDEEP 6144:wEiC1xJib7raMOMA9bB0gSZ1WnMfypE/vYF7cNxI:wbkHIraDzI1WnMmYvYF7cNxI
TLSH
T1D4E4E795A4EC3CDAF6B5057969B38121327AFE8151150B17392CB2301F32AE37E6E91F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	9675d4f49fd95a2038be7927a76d4df183ee02248987dc86d631a1fedbbd3f01.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	9675d4f49fd95a2038be7927a76d4df183ee02248987dc86d631a1fedbbd3f01.exe

C:\Users\Admin\AppData\Local\Temp\9675d4f49fd95a2038be7927a76d4df183ee02248987dc86d631a1fedbbd3f01.exe
"C:\Users\Admin\AppData\Local\Temp\9675d4f49fd95a2038be7927a76d4df183ee02248987dc86d631a1fedbbd3f01.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:4132

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

session.log

Path C:\Users\Admin\AppData\Local\PrinterCheck\session.log
Size 224B
SHA256 9ec3e4093b2ed913db456baed1c476626b340ed385ee683ced1022714d7882ea
MD5 7bee71b90dabd7090caed09a3ac87902
SHA1 2951401fccbe2b556029fe14fcdfaa680b53e151
SHA512 f07f642ea200a60b1ee8447a1e62f291b4c96ab63596c2eef78a99557f6bafe98c8de5d014b66c249e4893365e8cd07a4c216576884f3940f90222ffb643a0fa
TLSH
T165D0924124698802E2C81ADB3538CACA46F2E07E598AA9AC73E4CFC0580CE1C585D9B4
MD5 SHA1 SHA512 TLSH

Submit Download

memory/4132-7-0x00007FF736790000-0x00007FF736826000-memory.dmp

Download