2b427102f1cc97c298f4ec52d645f5a5ec61b3e51cca35f7381d46f90c5c0985

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/11/2026, 20:02

Target
Madium-Module.dll
Size 10.2MB
Sample261104-yr5phsef24
SHA256 2b427102f1cc97c298f4ec52d645f5a5ec61b3e51cca35f7381d46f90c5c0985
MD5 a0174daff8f54438c53332c53a966031
SHA1 a5e434319c10fa9389d3d2d80982cd1083795553
SHA512 8bac4ebeb826cb0596d2c4a39201a49ca9310580aede572677f5513ae16a070d949eabf6941f129ec961e07e9d4cc97ff3f4cc6bda6bbe7940b95bfac4f9ecfa
SSDEEP 98304:qZTEHz+69NupF37u1u4vNNwvhMwCIfxtzibX9hVY1NH6ZIhtygTrw:uTEy2ukNwvhMjIfxtzibPKvaZ+jrw
TLSH
T151B69E6AB6A501ACD83BC038C6578E23EBB1B4961731A7EF059056792F77BE0173E350
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	rundll32.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Madium-Module.dll,#1
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:120

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact