a9b390969f6c351f163a4ad67c9f5779eb4332157830f02a450d7b3f858528c4

Analysis

max time kernel
150s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/10/2026, 21:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
random.exe
Size 8.6MB
Sample261015-1bcd5sds91
SHA256 a9b390969f6c351f163a4ad67c9f5779eb4332157830f02a450d7b3f858528c4
MD5 be5d3238b82242e1d589895b90f26d91
SHA1 a1ead56cdc456fa1deec7aad72196654e05df239
SHA512 c563b7db60a03c1e73fe4565b580a0de3feded5a24ab9200831a916e8df26424a84cc1a4cf89d17d69c63e4e9e54d73e41ed3e747f72fa9558050a0fb56c3a20
SSDEEP 98304:dR+X7dmOkuP6Rwzdm3rNL8BtuBXaEWTQ83j/Rvl1:dR+XfBP6q0aBKaE+7z/Rvl1
TLSH
T17596BF17F7859269D02AC17CC2E78B26E632B4451B2262CF1244573D2E77BF82F3A794
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	random.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	random.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5976	random.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5976	random.exe

C:\Users\Admin\AppData\Local\Temp\random.exe
"C:\Users\Admin\AppData\Local\Temp\random.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:5976

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads