Analysis
- max time kernel
148s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/11/2026, 15:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
efedc24e7b6d4f6fd58df40eebc13c20973617e99bcdad9734e5e7a6d68d3adb.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
efedc24e7b6d4f6fd58df40eebc13c20973617e99bcdad9734e5e7a6d68d3adb.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target efedc24e7b6d4f6fd58df40eebc13c20973617e99bcdad9734e5e7a6d68d3adb.exe
- Size 156KB
- Sample261102-sx43aaa151
- SHA256 efedc24e7b6d4f6fd58df40eebc13c20973617e99bcdad9734e5e7a6d68d3adb
- MD5 02b987655a305268117df56bd8fedf27
- SHA1 88a7095842b159897f139d68d64efdfc992f718e
- SHA512 3a5cc167b229de63da2f0605d5f0b4b8824c349226420e9851a14ef9445ac910d383975a26d2d3e257e7335d01c110d61f945c939c9a7af95e4d7a7e11e3549e
- SSDEEP 3072:X9bISSjr9UOuA8zriCWoDgblYMnki2h0TQMLZoq9iJyXoJ9qXIU+OHpykH7K:X9b5Sn9huA8zjWoDgblYUVTvoq9iYXom
- TLSH T1CFF35A4633A810F9D1A7C279C9A28A12F3B37466573463CF136487B92F276D1BE39325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname efedc24e7b6d4f6fd58df40eebc13c20973617e99bcdad9734e5e7a6d68d3adb.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain efedc24e7b6d4f6fd58df40eebc13c20973617e99bcdad9734e5e7a6d68d3adb.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\Log\ClientDiag_20261102.log
- Size 1KB
- SHA256 77834123de06a057db35cce7a9e3fd69e72e50a44cf58a739f779a140fb48b2b
- MD5 00db803bcde45c2cca90dc34e7f8afc3
- SHA1 ccbe98f28b7ace980a2ea97255acdc3e0cecbbe8
- SHA512 352ae9f68c412c849a62cc6051390ce5285226e48757987b9ae8b6bf90aae8b7a0ae5774f044a4ff83026343b0158d866e3452bb04bd72649180eddc9bbf6ba4
- TLSH T15C411620222C66F512CE8C60126ECD86C75454AE53BDCFB72E81DD1B32A1F585AEB5C6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\Log\ClientDiag_20261102.log
- Size 2KB
- SHA256 cbba327e0eb6e8f2a144d45ca61801e114fceab92057f1071a4f11c8a754dcd7
- MD5 f0a092e47b78435c364bdb2e1c7fbaea
- SHA1 419d9fd5fcf20055297df533ae628a8a249c076f
- SHA512 49c5489a70488b9478d92d22af7e981d1dcba62201d44a2bdecfd1881c689f2d542183a7f43a5d25d2a3bef950e331e3a29f6f1b5c59a3554e344c5e5dd1c391
- TLSH T1CD510520222C66F612CE8C60126ECD86D75454AE53BDCFF72E85CD0B32A1F585AEB5C7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\Log\ClientDiag_20261102.log
- Size 3KB
- SHA256 49ba3fc026350c0fc9a53d8670159da1198506444c1e76092d7346b11c007664
- MD5 c3540af6475a2ebd623016ee100138b1
- SHA1 9ce76218d5996bce6bfc78770fbbb750284e7d77
- SHA512 119f540bef7fb06198fff6f88159a9816b29228cabee851116bdd7c487d7335d1a627657026cdf3a358358e56eb7ff60b88d2f562f13cd7b397742968ce3b60e
- TLSH T154714620226C66F613CE8C60126ECC86D35454AE53BDCFF72E85CE1B32A1F585ADB5C6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\Log\ClientDiag_20261102.log
- Size 4KB
- SHA256 33084bb19262ecdba51812f42ac92fb57273b99f1073505d361a7e85c45d9f5e
- MD5 7485f060699d514442be342f8efd7f3e
- SHA1 d89b2390bf18273e6e53fc33e1d3e16636a8daef
- SHA512 af39b98e732eb36da1bbb015c0ad63a833331d0e984233a3d8603bb251ead265f4154b7ff6359a37dbf4bb15b054e36009573bc267875614d59c0511ef0c7dcb
- SSDEEP 24:1RWD9h1taJY+OlR90X/OItaJw+Oxpx0//OZnptaJf+O4x20Q/OMtaJE+OpBN0X/5:6D9hraJxaJUaJtaJFaJc
- TLSH T1A4914520226C66F603CE8C60116FCD86C35454AE53BDCFF62E85CE1B32A5F685ADB5C6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\Log\ClientDiag_20261102.log
- Size 1003B
- SHA256 d6d3af852bfcfc141b93f3923d8413adc84cf24c863f75bc3d79ba27f380beb2
- MD5 c82933a3ab34a9763962847325c00dbb
- SHA1 6a2f30f4ce1d2ac8508b5f0e6406dfcf513c5bfa
- SHA512 a97d94b98880531103c38b6cbbe3955117599d902f85e5c661584eedab200e93f9de49017c321409d3c76ef1e7886a65975515e4f99db219b93f55fd20d00059
- TLSH T115110421632C2AF612CE8890116ECC46C75458AE93BDCFF72E81DD0B3260F945ADB5C6
- MD5 SHA1 SHA512 TLSH