5a47d915224d3648cad6760badba788defafde34a6158cf8188df2d9893e96d0

Analysis

user interaction
yes
max time kernel
15s
max time network
19s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
17/10/2026, 16:48

Target
YandexDisk4Setup.exe
Size 5.2MB
Sample261017-vbk4dsax8x
SHA256 5a47d915224d3648cad6760badba788defafde34a6158cf8188df2d9893e96d0
MD5 2f7fb4e5f0ece3ea5860dfb21aff71b3
SHA1 738c6c4a481eee932e16c5c2889d9049ef437a96
SHA512 4c48a48904de89d9f1428db42cfb98888bf87475d93966688f1d5418c777da805a428194282d6e0cdfe4be0ea5c92f388fad652840772356779ae9fd42ae0a50
SSDEEP 98304:rgW+Y7IDWvNu1DdVfwBPsWxNJNlj99LPA:Tz7IKvNul3WvBNlH
TLSH
T1FD467B067B6480E9C1BAC474C6564B67DB71FC8A4EB2978B0291737D2F336B85F2E214
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	YandexDisk4Setup.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	YandexDisk4Setup.exe

C:\Users\Admin\AppData\Local\Temp\YandexDisk4Setup.exe
"C:\Users\Admin\AppData\Local\Temp\YandexDisk4Setup.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:464

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact