8ea41018e473f8acce5c61e176769c7e7710a0874385922f947af6d7719bf865

Analysis

user interaction
yes
max time kernel
598s
max time network
489s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/10/2026, 10:07

Target
FQADFP0987654323456780000098765HG987654.exe
Size 17.1MB
Sample261030-l5y3nsbs8t
SHA256 8ea41018e473f8acce5c61e176769c7e7710a0874385922f947af6d7719bf865
MD5 f334839dd0270109e972866163ca3a24
SHA1 a45f8248b4f061889b575b6a044c83451cb31e6f
SHA512 1055931b1789f4e9a4a93566c6d35669ef753daabf692b6a21bd5c232396adc778083ee4fda95c9ca6f8c8a08442cdbd64e3a19d511e62799985af41705faa3a
SSDEEP 12288:Xn8K1rVJJspnWk7F0nv5NrSyfNyyDwuvO+riTVU0A9TLUEQhxaDVdlcF5UlLE:371rVwpnsnv5NtgyDB2XglLE
TLSH
T14307F012B8C2DE225E9309B6EAB0580ED654C75B520B78A0F1DC6427BB7B9C111B73DF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	FQADFP0987654323456780000098765HG987654.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	FQADFP0987654323456780000098765HG987654.exe

C:\Users\Admin\AppData\Local\Temp\FQADFP0987654323456780000098765HG987654.exe
"C:\Users\Admin\AppData\Local\Temp\FQADFP0987654323456780000098765HG987654.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:4820

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact