19b34c343ed869d71a1c489dbd07703bb14046fa338247d1e56e0701c39cdea3

Analysis

max time kernel
148s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 18:17

Target
INV_12459239299237560091.url
Size 126B
Sample261102-wxaefset6k
SHA256 19b34c343ed869d71a1c489dbd07703bb14046fa338247d1e56e0701c39cdea3
MD5 067c0f2182b61a00c2076ab93d95645e
SHA1 b9e5754ddf039169d22dd56aec62af721d5813b9
SHA512 9c478a1d268ad9da8fa9feff8d051750e94fdc96e3079378eca0161958ed9bae6e618c72ae3eccf84196923022f4a50a323765e9ae7a427676495cd07f8a0186
TLSH
T18CB02B08C4258049A80C34099448843774D3818A1017C5C06747C70F10E27B4C2482D7
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 1 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	rundll32.exe

C:\Windows\System32\rundll32.exe
"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\INV_12459239299237560091.url
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:360

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact