22a1a6d32cbaccdb0820b7535c3ea11301dfe272f5703d0a6c98b6cb88b8df80

Analysis

user interaction
yes
max time kernel
149s
max time network
145s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
24/10/2026, 18:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
VencordInstaller.exe
Size 10.9MB
Sample261024-wlrvcsfd87
SHA256 22a1a6d32cbaccdb0820b7535c3ea11301dfe272f5703d0a6c98b6cb88b8df80
MD5 50a72fcede061da13f0b5ada39e27c8b
SHA1 37919d7f490d674b91d10da6bf0528096c18c68b
SHA512 78115d49b0c10abc24d02acd4a0372bc6887d75573a5409a5a8487ad6d0dd9df05b0ea9368b94b9a0c2e0c79e79ed6894fd237971aba99a5e60dfa4d1806776a
SSDEEP 98304:QSHripqMYW7WIs5PZEv5VrgvoU1QTaCLbKrxfT5ro/tQW433eYBgYzwRFpwL6XWM:Qy2v7/s5y7Q8kGtYOkWNp
TLSH
T19BC65D47E9A251ECC1AAE1318566A673FA317C481B2427E72B90E7342F73FD06E79710
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	VencordInstaller.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	VencordInstaller.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3964	VencordInstaller.exe

C:\Users\Admin\AppData\Local\Temp\VencordInstaller.exe
"C:\Users\Admin\AppData\Local\Temp\VencordInstaller.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
- Suspicious use of SetWindowsHookEx
PID:3964

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3964-0-0x00007FF71C660000-0x00007FF71D9E6000-memory.dmp

Download