9ba372ef921f78eb204a998398eb7f64ac34f76ec90fb56b5539029666054d44

Analysis

max time kernel
150s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/11/2026, 15:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
agentx.exe
Size 15.9MB
Sample261104-s9phcssxew
SHA256 9ba372ef921f78eb204a998398eb7f64ac34f76ec90fb56b5539029666054d44
MD5 dcb48893e4d7795b87f6a83201439ecf
SHA1 811c78f7c560a012e9a76e71fcfa9be4ecb1d2b4
SHA512 1b0ada0e08fa3259ebef70726c1354e8cffca9800074274285e1c0b16d95625796629ec906ca6234394634b0ddc007583134a507b6dade8bf5eae6c95bbf7278
SSDEEP 98304:RwSlLJ/iDtUC8Ew2kKEFZFVl2BY2+eLRrS8G8LuJT4NLke4Fy8Ez:RzGUCHw2kKAoi8LvL0E
TLSH
T189F63A43E8A541E4C0AAD679C67A9153BB717C895F3023D36F60F6642F36BD0AEB9700
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Reads the TCP/IP host and domain name from the registry 1 TTPs 1 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	agentx.exe

C:\Users\Admin\AppData\Local\Temp\agentx.exe
"C:\Users\Admin\AppData\Local\Temp\agentx.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:2964

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

config.toml

Path C:\Users\Admin\.agentx\config.toml
Size 593B
SHA256 6fc3b48ea92387c8c4b0fd002e0fe0b38720397521911343cc506d169c50c8a2
MD5 920029549299299c7b2ff009620d4b15
SHA1 2ecf3d4a2a287cd6849bb8932e5cd9b905b971df
SHA512 1b65b3622d4e43cfe5e63de17c5067c48d1bd5538fa783ca393486d900ff4d7f03dec4f3cea55ee7c034c7ca2c6f24de1a33063c49b299c3ab053b857c8d63e3
TLSH
T18CF08BA521EC2C7FA9EAEA01C55B12950B38CA00182B18787DAA21AC0D1120CA6F9D67
MD5 SHA1 SHA512 TLSH

Submit Download