4eabcd5dac7a2084147fea1e1641cff9165cbdfb80fbed9e25a12967e55a1de6

Analysis

max time kernel
150s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 10:55

Target
2026-09-30_63ec1c55a9977e7e912dadd70e33c5ab_coinminer_glassworm_icedid_njrat_ransomhub_ryuk.exe
Size 3.3MB
Sample260930-m1apys1fqa
SHA256 4eabcd5dac7a2084147fea1e1641cff9165cbdfb80fbed9e25a12967e55a1de6
MD5 63ec1c55a9977e7e912dadd70e33c5ab
SHA1 c58d1a27c5b5166836ae2b1f5f5ab1d5f5d423ea
SHA512 271196f7214deeac103a6464bdeaf6c29ebf6e63e37cfc57fcfc3e7c3a354d6b784f4f281c67bdf8a7e8f6264a1ac253bb4901e36bb94ea74f19e583cd52dde0
SSDEEP 49152:MMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fx:Jd9AddBcryO3cICgI9x
TLSH
T16DF57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	2026-09-30_63ec1c55a9977e7e912dadd70e33c5ab_coinminer_glassworm_icedid_njrat_ransomhub_ryuk.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	2026-09-30_63ec1c55a9977e7e912dadd70e33c5ab_coinminer_glassworm_icedid_njrat_ransomhub_ryuk.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-30_63ec1c55a9977e7e912dadd70e33c5ab_coinminer_glassworm_icedid_njrat_ransomhub_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-30_63ec1c55a9977e7e912dadd70e33c5ab_coinminer_glassworm_icedid_njrat_ransomhub_ryuk.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:3948

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact