4217417fbef14e30f6b02380b71526181e04cc4afa99959378daab1c4ca4fde1

Analysis

max time kernel
298s
max time network
154s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
13/11/2026, 11:15

Target
exposuel.exe
Size 446KB
Sample261113-nctzcsty3j
SHA256 4217417fbef14e30f6b02380b71526181e04cc4afa99959378daab1c4ca4fde1
MD5 3c3fb7f8a3bb49125ea1b5f7376b270e
SHA1 86cc36aa338bc101503c8ff80449c0c559028ba4
SHA512 3c0354dab4498b8271b7b504746c3505a2584c9e633f15ebb6eed88e8be6a50b5e605f9938d6f06f0b7e23bcd220915d025753b2e5eac19261b75789414f6a8c
SSDEEP 6144:5dbO03eCxDC2qxoFma+vJ0T/8WKEgKmi9oNW/2tqnsIiD+QZ00B3csF17gTwr2SM:5dbAwmaCS/2tHW5kep
TLSH
T12AA4091636A89DDADC22613C91CFA30D6675BCF007A396C7832112629E47BE8DD7FB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	exposuel.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	exposuel.exe

C:\Users\Admin\AppData\Local\Temp\exposuel.exe
"C:\Users\Admin\AppData\Local\Temp\exposuel.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:4180

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact