ef306dbe503ad825051751047f84dfadfffe885bd4fb9f615eb4c3f410bdbd0e

Analysis

max time kernel
149s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/11/2026, 15:00

Target
ef306dbe503ad825051751047f84dfadfffe885bd4fb9f615eb4c3f410bdbd0e.exe
Size 197KB
Sample261110-sdkvasvvbv
SHA256 ef306dbe503ad825051751047f84dfadfffe885bd4fb9f615eb4c3f410bdbd0e
MD5 7951a6a23bd40247cc18aab83a81ab1b
SHA1 0780d6f7d6c6cd341310bce9dd3e70e96ce6a967
SHA512 fa41721aba4adc9ee76d40dc72c8a1fdbcdcdf42a6145a0d3d0d4a5c3601280f97d0ea7e597de1cf238d1f4e0daae3e21cc4eb423dcb13c7d874639aad9162db
SSDEEP 3072:xE3k9/3Td4G2pmKcXLIM61dhFXnEDcfidYvpBmKV0yl8EJcX+He8E9n:xwkx1KcXhwkKa3rXYe8E
TLSH
T1C9143B16E28A53F8E033E1747796DA39B13974113B22E5EF73748A313E71A82763B650
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 1 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	ef306dbe503ad825051751047f84dfadfffe885bd4fb9f615eb4c3f410bdbd0e.exe

C:\Users\Admin\AppData\Local\Temp\ef306dbe503ad825051751047f84dfadfffe885bd4fb9f615eb4c3f410bdbd0e.exe
"C:\Users\Admin\AppData\Local\Temp\ef306dbe503ad825051751047f84dfadfffe885bd4fb9f615eb4c3f410bdbd0e.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:2196

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact