519f434ba68e04887e2b17fb8707ddefa1703d721536b5627406974837d18698

Analysis

max time kernel
150s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/11/2026, 21:55

Target
pubky-node.exe
Size 11.0MB
Sample261107-1stdzs116q
SHA256 519f434ba68e04887e2b17fb8707ddefa1703d721536b5627406974837d18698
MD5 d96751a39dc061f8a9da5fab796ab93f
SHA1 0f81e6c3de9f2e4554ada5b53d372b9f89300305
SHA512 bbd277b744faf929382a9d945b5377bcc95e5834031b7aadee4dc78be68775fe3020c4114ae9a401bd408b1a29e3bdb6568ce15b2667c9f946ea9128d3b6317d
SSDEEP 98304:Ea2w7wzu0vGXYghAwHZG+NEpYo17xAb+R7lajxH:lgEy
TLSH
T15CC627217B9A98ACC05AC47493468A725A7130CB0B39B9FF44D886793F79AF51F3C358
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	pubky-node.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	pubky-node.exe

C:\Users\Admin\AppData\Local\Temp\pubky-node.exe
"C:\Users\Admin\AppData\Local\Temp\pubky-node.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:4424

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact