d766af703dde2e0a66c2ecddaad0cd4324c96ba2d6ca5365decb0622c2cedf9d

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/10/2026, 16:10

Target
windows_amd64.exe
Size 4KB
Sample261017-tmlzdssx8k
SHA256 d766af703dde2e0a66c2ecddaad0cd4324c96ba2d6ca5365decb0622c2cedf9d
MD5 cd62516fc5e3c3f86bfad31b981ba799
SHA1 4551b6244418b5fa7b7b4a7f5efa1b5d486725bf
SHA512 bd2ebca9d8cb133c15134c76e9668bae0b482be0a927f4a1fe880752ef361a5f254f054fc9c6aa107328821bd9ed8175c60f4e6e35575d9aa9cf1f0a1a86d2f8
SSDEEP 48:6IIF9BlQaexxRgZS7An0cF5uduvxRxUjbON9XM/ge93ahr0/:y9BOaMu70cF50uDxUOvXeg
TLSH
T11691C64170B989E7E95C45BB4C0FB8A0B91D740A41C483A64338A5993F3957BF4BCB0E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	windows_amd64.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	windows_amd64.exe

C:\Users\Admin\AppData\Local\Temp\windows_amd64.exe
"C:\Users\Admin\AppData\Local\Temp\windows_amd64.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:1276

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact