4756e0efcd1cb6a429c4c744b18668071766ec101cb24589f8752e02f9b0610d

Analysis

max time kernel
149s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 11:05

Target
2026-09-30_5ee51ef9c36cb8d2585bff4513f7c13b_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 729KB
Sample260930-m7b7csscna
SHA256 4756e0efcd1cb6a429c4c744b18668071766ec101cb24589f8752e02f9b0610d
MD5 5ee51ef9c36cb8d2585bff4513f7c13b
SHA1 8fcfded848b55aef0057d00647c841718277a051
SHA512 687d5f6087e7c668f6ebaf0e88ca884a756df3259674339fe0f08aff41aad5848f3d690208bb9b2a5fc9e8ecb64e178c3c99a5ebbdc71f5ecc8cde152c4029cf
SSDEEP 6144:XSsWA9dGgvpgu9zhAyn+xaVd0D4ONZIuOibwJmkUagkvGr8weL+j9nvwo7Q8MPEU:XSsWA9zvxhAyE3EON67kG+y0FvJ7Qr
TLSH
T145F47D19E7A502F9D1BBC1B8C9424563EB72BC46533096CF03D15A661F3BBA06B3EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 1 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	2026-09-30_5ee51ef9c36cb8d2585bff4513f7c13b_cobalt-strike_icedid_njrat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-30_5ee51ef9c36cb8d2585bff4513f7c13b_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-30_5ee51ef9c36cb8d2585bff4513f7c13b_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:2900

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact