Analysis
- geolocation tags
asiadelhiinindia - max time kernel
898s - max time network
488s - platform
windows11-21h2_x64 - resource
win11-20260911-en - resource tags
arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
29/10/2026, 17:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cd.exe
Resource
win10ltsc2021-20260911-en
1 signatures
900 seconds
Behavioral task
behavioral2
Sample
cd.exe
Resource
win11-20260911-en
1 signatures
900 seconds
Behavioral task
behavioral3
Sample
cd.exe
Resource
win11ltsc2024-20260911-en
15 signatures
900 seconds
General
- Target cd.exe
- Size 5.1MB
- Sample261029-vx5d6aew8l
- SHA256 49bb587c2bb7364f733b46264c12ec007d52b35bf72e7aef479d3947a7cc177f
- MD5 60905147cbf5fa15792c8f09e0313ca0
- SHA1 7187b93e83183eb93fb2198b598446d3a7f4c299
- SHA512 c75f35f99602e0c96e3b9dc36119a071d14a7f1424f81af222a317b3540ed98539010e29f494ba0ea466149107f10c7c1e3484c01a29584a2f475a79647a31f0
- SSDEEP 49152:jJ2SLIh0vi8fdLoEiHBQESUe5Z4KTVv/r0:j/EhCicdEpQCe56Ki
- TLSH T124466BBF65277A18FA1D0DB260BE34A5B5A5205757BAD20B05FB7C301F33260D60EE89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname cd.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain cd.exe