9075f82ffcc66234207c31166a7049e0a38a2aa15130791d18c389d5b8f67e2b

Analysis

max time kernel
148s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 12:17

Target
windows_amd64.exe
Size 4KB
Sample261102-pgdnlsvz8j
SHA256 9075f82ffcc66234207c31166a7049e0a38a2aa15130791d18c389d5b8f67e2b
MD5 173acf05b9731a14d413b79594750cc7
SHA1 d5806bf2a3cb3fd3f350694f6c0e18670a3cb2a1
SHA512 5f10f09b136e6242543fb378f9b9f8357efc2f47b37ab9dd4e9b279a4db76da2af4e0e232d7e37acb02353d7b58e7e088ba44344d1308f2d15190580bad8691c
SSDEEP 48:6IIF9BlQaexWgZY7An0cF5uduvxRxUjbON9XM/ge93ahr0/:y9BOaM/p0cF50uDxUOvXeg
TLSH
T1F391C64170B999E7E85D42BB4C0FB8A4BD19740A41C483A74378A5993E3967BF4BCB0D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	windows_amd64.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	windows_amd64.exe

C:\Users\Admin\AppData\Local\Temp\windows_amd64.exe
"C:\Users\Admin\AppData\Local\Temp\windows_amd64.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:5004

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact