dc87616fb9893933d2e0576a7e65bc890bbd1e5872e5e6867dcdfba7c8985b99

Analysis

max time kernel
150s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/10/2026, 14:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
output.exe
Size 10.1MB
Sample261018-rwvxjs1shx
SHA256 dc87616fb9893933d2e0576a7e65bc890bbd1e5872e5e6867dcdfba7c8985b99
MD5 8f83c29452287d25fcc9ba8e3dd02df3
SHA1 24d9e25b37e2ffe76454c56bfcd28de8298c2444
SHA512 c468f45bce4d29354ec10a4a8577982cf0dbb72e329d99073ae75ef6650f208b4eba8d104eac8ea55f26b4a0d8f76e67e9ccff5258bd8fd598a72f31a4b0f5e7
SSDEEP 98304:W4HPfx34d2QsUCzHLp05WLoLFCl1d7XWNa+Sotoocy+:Wsfx34d2SWLp05Qjl1d7mNhSMoo
TLSH
T1D0B69C1993E904A5E43BD738C6568233DAB0BCA65735C1CF0599F6461FB3ED18A3F222
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	output.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	output.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	3344	output.exe

C:\Users\Admin\AppData\Local\Temp\output.exe
"C:\Users\Admin\AppData\Local\Temp\output.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
- Suspicious use of AdjustPrivilegeToken
PID:3344

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads