Analysis
- max time kernel
149s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/11/2026, 15:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
efedc24e7b6d4f6fd58df40eebc13c20973617e99bcdad9734e5e7a6d68d3adb.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
efedc24e7b6d4f6fd58df40eebc13c20973617e99bcdad9734e5e7a6d68d3adb.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target efedc24e7b6d4f6fd58df40eebc13c20973617e99bcdad9734e5e7a6d68d3adb.exe
- Size 156KB
- Sample261102-sx43aaa151
- SHA256 efedc24e7b6d4f6fd58df40eebc13c20973617e99bcdad9734e5e7a6d68d3adb
- MD5 02b987655a305268117df56bd8fedf27
- SHA1 88a7095842b159897f139d68d64efdfc992f718e
- SHA512 3a5cc167b229de63da2f0605d5f0b4b8824c349226420e9851a14ef9445ac910d383975a26d2d3e257e7335d01c110d61f945c939c9a7af95e4d7a7e11e3549e
- SSDEEP 3072:X9bISSjr9UOuA8zriCWoDgblYMnki2h0TQMLZoq9iJyXoJ9qXIU+OHpykH7K:X9b5Sn9huA8zjWoDgblYUVTvoq9iYXom
- TLSH T1CFF35A4633A810F9D1A7C279C9A28A12F3B37466573463CF136487B92F276D1BE39325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname efedc24e7b6d4f6fd58df40eebc13c20973617e99bcdad9734e5e7a6d68d3adb.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain efedc24e7b6d4f6fd58df40eebc13c20973617e99bcdad9734e5e7a6d68d3adb.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\Log\ClientDiag_20261102.log
- Size 4KB
- SHA256 b918325da4ae83097f17293ab795619b33eea220a9a3d4a95d8e46169f6f53b0
- MD5 4fd3ab1883e64b3bbf302483cc5da636
- SHA1 84d53cbbfe0ebb6ae72392c4f426e6ba5040b3af
- SHA512 9112a18228a2628e8c79038dd9336eefa8234d23a93764651636c91059b910f2b83d12682209a94f2c69fddc7157845223d7f30118c7c28a04a5dfca67295e70
- SSDEEP 24:eRWD9O3taJD+OsJm0I/OYtaJo+Othd0n/ObtaJX+O0le0k/O1+taJc1+OJfBXTa4:FD9OdaJdaJwaJQqaJcfZXGZHaJZ
- TLSH T1839158226A2C17F103CA0EA1126EAD89C75434ED7375CF663F89CE2630A1E1D5ADB5C7
- MD5 SHA1 SHA512 SSDEEP TLSH