4611af15cd184ddde36d5cb1dbcef1e20cd8768f333e282f042962126ffde33e

Resubmissions

27/10/2026, 07:39

261027-jg5t7scs8q3

26/10/2026, 12:45

261026-py5tesdz2z3

Analysis

max time kernel
298s
max time network
115s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/10/2026, 12:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
pdf_20261030261877000259_UEMG_2695200072295_installer.exe
Size 409KB
Sample261026-py5tesdz2z
SHA256 4611af15cd184ddde36d5cb1dbcef1e20cd8768f333e282f042962126ffde33e
MD5 7c961248a9baf6e10a07a21e1a8345de
SHA1 d08086543119d03dc8ce8f4b0213c10ba65966c4
SHA512 e8f5c83778260e554a142f6fc4faccba406a1520277082d63f5406777f48c7a47e6a12c245b5c80076658b7e50c03e159f4dd25f91c3012724404084c2ff3b58
SSDEEP 6144:0SS6oFSQIWrD/s2vNCu8pfozBM6+0YIeOMSmWbOh:arD/s21L8azmV0YIeOMSmf
TLSH
T1D894AF5AEAA405F9D17B9234C9A64607FB723C590360DACF43A84AE22F237D05F3DB51
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	pdf_20261030261877000259_UEMG_2695200072295_installer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	pdf_20261030261877000259_UEMG_2695200072295_installer.exe

C:\Users\Admin\AppData\Local\Temp\pdf_20261030261877000259_UEMG_2695200072295_installer.exe
"C:\Users\Admin\AppData\Local\Temp\pdf_20261030261877000259_UEMG_2695200072295_installer.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:4108

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads