bb7bf84a8189a3a7ed50aa4d0321723926bbcfba47dafc44fd57a6f0899a37ed

Analysis

max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/09/2026, 18:06

Target
2026-09-25_e6d43ddfdd1dd3f1be1e4dc5505adbe6_glassworm_icedid_njrat_stealc.exe
Size 2.5MB
Sample260925-wp49vsshng
SHA256 bb7bf84a8189a3a7ed50aa4d0321723926bbcfba47dafc44fd57a6f0899a37ed
MD5 e6d43ddfdd1dd3f1be1e4dc5505adbe6
SHA1 a2c312d07c789324172a00c7fb6e0ebcb82519fb
SHA512 14609da7a00b24aa7846a1c5d0d9ad4323e4cb9693e97c5928212a4f43e3f9b16d25f84ce09bd87a194166aec0c9f21b993ea4d3b8e1ace73986cc02a4334b60
SSDEEP 49152:7l/NFDx7eLl8wmb4KVBQw+NmLuJ8H9MKofPEzWjNWd9:7tDCSVfSfPEzcNW
TLSH
T17DC58C37629D16ECD366C1788B958992D3713CCD03306AEF07B049A69EE76D05F3A392
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	2026-09-25_e6d43ddfdd1dd3f1be1e4dc5505adbe6_glassworm_icedid_njrat_stealc.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	2026-09-25_e6d43ddfdd1dd3f1be1e4dc5505adbe6_glassworm_icedid_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-25_e6d43ddfdd1dd3f1be1e4dc5505adbe6_glassworm_icedid_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-25_e6d43ddfdd1dd3f1be1e4dc5505adbe6_glassworm_icedid_njrat_stealc.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:4552

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact