98d3b0eabdd6dba168a14f0cd4c4ebe4543a975e6215e342aba8d7abff007df7

Analysis

max time kernel
150s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 19:20

Target
2026-09-29_7735566d8f3bc5aa2a5af2ff9a783f35_cobalt-strike_icedid_njrat.exe
Size 1.5MB
Sample260930-x17d2a1gpg
SHA256 98d3b0eabdd6dba168a14f0cd4c4ebe4543a975e6215e342aba8d7abff007df7
MD5 7735566d8f3bc5aa2a5af2ff9a783f35
SHA1 d3b13bb9d31195bc96fe1e748743beba656ec4bb
SHA512 34c965d96ace76ebb1b9949b60fed01ac48a8463b77ed9e39d909ab4343d1ad9a8cb475ecd580a94aa3d80574bcf942ae55c89fd588653cde8941298de5548ee
SSDEEP 24576:aLT0n6fW8IVk38D6mslcTnLafESJDJjd+exUgzwLl9N:Wm6u8IVg8D6ms6hMJjd8
TLSH
T1D565B01F679412DAD13B93BD94D58B81F9A1B8050B309EDB016619E92E27EFC0F3EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	2026-09-29_7735566d8f3bc5aa2a5af2ff9a783f35_cobalt-strike_icedid_njrat.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	2026-09-29_7735566d8f3bc5aa2a5af2ff9a783f35_cobalt-strike_icedid_njrat.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-29_7735566d8f3bc5aa2a5af2ff9a783f35_cobalt-strike_icedid_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-29_7735566d8f3bc5aa2a5af2ff9a783f35_cobalt-strike_icedid_njrat.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:4824

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact