3cb11652712300a37c8d6722896ed2470cf21087741542c54d02ea985fd2b385

Analysis

max time kernel
150s
max time network
139s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/11/2026, 05:55

Target
macro-tui.exe
Size 5.0MB
Sample261110-gmgnfsdc36
SHA256 3cb11652712300a37c8d6722896ed2470cf21087741542c54d02ea985fd2b385
MD5 e3b1e46f2d57b382cd57bcb4b6a41cc7
SHA1 f2553621e6dcecfc029cf773dc0cb7016c01a5e5
SHA512 501e30f7211e6cc77392ceef679aad64b6bae37dbd1f3bd006860fac75e1b4008e0f217d5e4ce512aff9bd02797e7dcd41f65e5820329af98b3d3af4071c6b16
SSDEEP 49152:wTgMgOXLEa+fIKukU2/tt+5bOKtObUybK3FYQwhQYBaqRjOpPtKZ59Z0zmIYZ56u:wiABOfK3CxBWPyQzmuMTH+iyg3
TLSH
T1D5363A12BA5B98ECD15AC87483468A735E2174DB0B26B9FF00C456393F6ABE01F3C759
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	macro-tui.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	macro-tui.exe

C:\Users\Admin\AppData\Local\Temp\macro-tui.exe
"C:\Users\Admin\AppData\Local\Temp\macro-tui.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:628

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact