65fbc5199e92e3ff769457d9a25a5ca5985bd8227bc4754ce854cd1baa3ca390

Analysis

max time kernel
150s
max time network
132s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/11/2026, 23:49

Target
mihomo-windows-amd64.exe
Size 58.7MB
Sample261107-3vf8jsgs7x
SHA256 65fbc5199e92e3ff769457d9a25a5ca5985bd8227bc4754ce854cd1baa3ca390
MD5 5bbadd8c48f8bd3e7b1277f3c66909fc
SHA1 56714d9c123511599570d3fd4c3db2dfcbd6cb0f
SHA512 fb5ca488ceb6210499f5ae6e9ade814314801340df1977613f8e2683caaa3e01e21c1d0dc3d06b38595c4175e099714fb2c248512663fdae1ea5a0f122d80d03
SSDEEP 393216:9f5p/ZhxPPTiO5hfdozUrIDeP0Q3Ccii+Q/hH+K:9f5d5TiOXdoYr41g+Q/hH
TLSH
T107D75B47F82A0CE4F49DC439C66692237B713C69572523E71B10FA542F7EBD06ABA360
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 1 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	mihomo-windows-amd64.exe

C:\Users\Admin\AppData\Local\Temp\mihomo-windows-amd64.exe
"C:\Users\Admin\AppData\Local\Temp\mihomo-windows-amd64.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:948

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact