f787c1473e6a231726469017a0b16941cd4bc6f62fdae5a8aa797b55982198f2

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/11/2026, 15:00

Target
f787c1473e6a231726469017a0b16941cd4bc6f62fdae5a8aa797b55982198f2.exe
Size 185KB
Sample261110-sdkvasvvbw
SHA256 f787c1473e6a231726469017a0b16941cd4bc6f62fdae5a8aa797b55982198f2
MD5 d4e865128d2f060be382b1692876c6e5
SHA1 faed6999da992819c8cfcbe1d1c7c7244e985baf
SHA512 e7dfe9d259c6d98119046e05f6d44044f3ca1e02acf544e7b2bf229b2e2bdbee9d1a5dd087e730c97c0818e2478a633a18ab8252a3bf219d59a962b27bc87b9f
SSDEEP 3072:mG1DBy3mirzE1qc1dhF/ncDcfrd/S5p6BKVs8IdiNI+dxeiV9v:mSBGzEgC42K2nl+3eiV
TLSH
T176045C06F28250F8C417C1B4979AA272F67178524320AAFF57A8DF752F61EC0BA3E754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 1 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	f787c1473e6a231726469017a0b16941cd4bc6f62fdae5a8aa797b55982198f2.exe

C:\Users\Admin\AppData\Local\Temp\f787c1473e6a231726469017a0b16941cd4bc6f62fdae5a8aa797b55982198f2.exe
"C:\Users\Admin\AppData\Local\Temp\f787c1473e6a231726469017a0b16941cd4bc6f62fdae5a8aa797b55982198f2.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:5880

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact