49e0799663a1832f80639d3802d517e380bb3e76b9c80dcb9692ec9eea9a428d

Analysis

user interaction
yes
max time kernel
149s
max time network
143s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
27/10/2026, 18:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
retrac-bc7a70978d565fa2.exe
Size 422KB
Sample261027-xcedcaec59
SHA256 49e0799663a1832f80639d3802d517e380bb3e76b9c80dcb9692ec9eea9a428d
MD5 0b905efc8754789c7d57f32579cbf2fc
SHA1 742ea7b9e065fff4f12b21f7a84719b0f5a96e0d
SHA512 876a8010b72242e51c83ecb7430c05492f31d7f3f1e50177e26be3f85c78dc81cbfd005a758db3a3ede1129b4a5edceabc552234b2b113ee56775e20a0f26b93
SSDEEP 6144:pIxpL14dwKn2ldqYEyXBSvppRFdoPbXu9WRT7/C13S4s8pwA9tNM1bua:WQn2ldqYEyXAxpRFdoq9WoSua
TLSH
T179940888D0A315F7C6F6CE389B53A58AF471B8D8422E1EF717C9E4755006AE1F636E02
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	retrac-bc7a70978d565fa2.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	retrac-bc7a70978d565fa2.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2000	retrac-bc7a70978d565fa2.exe
2000	retrac-bc7a70978d565fa2.exe

C:\Users\Admin\AppData\Local\Temp\retrac-bc7a70978d565fa2.exe
"C:\Users\Admin\AppData\Local\Temp\retrac-bc7a70978d565fa2.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
- Suspicious behavior: EnumeratesProcesses
PID:2000

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads