1ab583b9409aaf904a63c6a4c45fb7a31f66796da4703c3d1f30060e8d3dfda3

Analysis

max time kernel
148s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/10/2026, 14:34

Target
关于核对并反馈有关资料的通知/__init__/newone.exe
Size 3KB
Sample261014-rxh95sts8m
SHA256 1ab583b9409aaf904a63c6a4c45fb7a31f66796da4703c3d1f30060e8d3dfda3
MD5 d0eb2e7715dc8a42a299410544d826ae
SHA1 a52bde1a9d818104cbfc8b001573bed9bed6cf97
SHA512 aa6892ce52b48174b76ff6ed2486e904c179ef05d9af83b4453092c46719e7580f17fcc4f7ea5af97c3d88e0ffd285f76a4b76fb8e084fe06f6ee5cff6dd029f
TLSH
T12A71A541605456F2D98DE37F8587B895FD4FB248A2C80B0B0798D81A2FB607BB5D9613
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	newone.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	newone.exe

C:\Users\Admin\AppData\Local\Temp\关于核对并反馈有关资料的通知\__init__\newone.exe
"C:\Users\Admin\AppData\Local\Temp\关于核对并反馈有关资料的通知\__init__\newone.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:1376

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact