6d2355058ca7c3be7ac8ac16816a78c89d1df75f9354a024213fc85f52ce5112

Analysis

max time kernel
150s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/10/2026, 11:06

Target
meshagent64-SonstigeRechnerCB.exe
Size 3.3MB
Sample261030-m7e81sysas
SHA256 6d2355058ca7c3be7ac8ac16816a78c89d1df75f9354a024213fc85f52ce5112
MD5 1a3e7168f4cfee74a79973ff97a7f657
SHA1 1b19f8331313b7a448b0cad4bb722d2ac706c00c
SHA512 8814923065ca773f06012b7c5c6cbf2b8dd4edb7502c695d6621aab38a641ab18194c275c3b1bf3cbedd88650c6bfc21625e916f5a79143b7e66ce367821c1f9
SSDEEP 49152:VMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fz:ed9AddBcryO3cICgI9z
TLSH
T17BF57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	meshagent64-SonstigeRechnerCB.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	meshagent64-SonstigeRechnerCB.exe

C:\Users\Admin\AppData\Local\Temp\meshagent64-SonstigeRechnerCB.exe
"C:\Users\Admin\AppData\Local\Temp\meshagent64-SonstigeRechnerCB.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:5064

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact