cdcac21a813fa0c09c59b1e62e62e589d6fa462ba6ecaf395216f855c88c2e4a

Analysis

max time kernel
298s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/10/2026, 18:46

Target
c (2).exe
Size 3.4MB
Sample261017-xe2lnabs8l
SHA256 cdcac21a813fa0c09c59b1e62e62e589d6fa462ba6ecaf395216f855c88c2e4a
MD5 4a2d9f003dfd2aebfcd1f57d55c1da27
SHA1 f960b69ce41e5c1c63461d50ad0a9547fe9b19a4
SHA512 f45ececf3cb1dde4f8d5d8bfe0c60e48bceffd575b1062cea8e60a1a05b1c2696e7d084cbc435668ee6ff955fdb9e383649df800ee2886128912fe686f59d6f5
SSDEEP 49152:0Eq5pX5ItlgBsnUxtv0u708TQmwuPP0hGoHEcnlssrrXZ78bqydEhD5fKr:2YSs00x8CphdTr6G9o
TLSH
T1B4F58DD2A7AA00E8E8B7F23CC5568117E7F2B817177097CB15A44A7A0F236D11E3E716
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	c (2).exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	c (2).exe

C:\Users\Admin\AppData\Local\Temp\c (2).exe
"C:\Users\Admin\AppData\Local\Temp\c (2).exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:4180

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact