4b469abd1358b5996cca5b80b96ff49ad07f19f70161715a3d500963e63876ac

Analysis

user interaction
yes
max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/10/2026, 02:20

Target
CodexInstaller.exe
Size 7.3MB
Sample261024-csec3a1zhv
SHA256 4b469abd1358b5996cca5b80b96ff49ad07f19f70161715a3d500963e63876ac
MD5 c29403da843d77677f42776e64a76e56
SHA1 5e57c5c0542e154e54c215f8afd4fa13506027ca
SHA512 eea22dff681bbcc353bbadefeae85bf94c5822b76789b45778d9ac0d8110a4282c51991ea18d085d5830bdede446a151d88b68b18d743991e49a148a28a9f6e0
SSDEEP 49152:hvtPhy183c6WQihDg3m2qiN0rvUrE1R1vgkpCssvQXzUyIMIwfRDZJRDiHfTW/FZ:HohRDUrcVW5onCKOr1rI
TLSH
T119767C09A3D006E0D166DA34C9A5D732E778BC929632C74F25A9E3CA1F336608F7F615
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	CodexInstaller.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	CodexInstaller.exe

C:\Users\Admin\AppData\Local\Temp\CodexInstaller.exe
"C:\Users\Admin\AppData\Local\Temp\CodexInstaller.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:3804

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact