Analysis
- max time kernel
149s - max time network
138s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
13/11/2026, 00:21
General
- Target 3eb415e7e09bdbf462acfa44e0ccd47196c03ddca53fbf296cbdf9ab42016bea.exe
- Size 45KB
- Sample261113-ancybsdz7w
- SHA256 3eb415e7e09bdbf462acfa44e0ccd47196c03ddca53fbf296cbdf9ab42016bea
Malware Config
Signatures
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
Processes
-
C:\Users\Admin\AppData\Local\Temp\3eb415e7e09bdbf462acfa44e0ccd47196c03ddca53fbf296cbdf9ab42016bea.exe"C:\Users\Admin\AppData\Local\Temp\3eb415e7e09bdbf462acfa44e0ccd47196c03ddca53fbf296cbdf9ab42016bea.exe"1⤵
- Reads the TCP/IP host and domain name from the registry
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3256-0-0x00000000004B0000-0x00000000004C2000-memory.dmp
memory/3256-1-0x000000001B130000-0x000000001B140000-memory.dmp
memory/3256-2-0x000000001B130000-0x000000001B140000-memory.dmp
memory/3256-3-0x00000000217A0000-0x00000000217A8000-memory.dmp
memory/3256-5-0x00000000210B0000-0x00000000210BE000-memory.dmp
memory/3256-4-0x00000000210E0000-0x0000000021118000-memory.dmp
memory/3256-6-0x000000001B130000-0x000000001B140000-memory.dmp
memory/3256-7-0x000000001B130000-0x000000001B140000-memory.dmp
memory/3256-9-0x000000001B130000-0x000000001B140000-memory.dmp
memory/3256-8-0x000000001C6E0000-0x000000001C8AE000-memory.dmp
memory/3256-10-0x000000001B130000-0x000000001B140000-memory.dmp