8de167d7fe4af467993eb20cd094fdc7b3106892d9b21a8a90db96675df8c3f4

Analysis

max time kernel
150s
max time network
117s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/10/2026, 08:09

Target
2026-09-30_acdc6f134e9505659b937db0ce6d1039_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Size 3.3MB
Sample261001-j2b3mazvbv
SHA256 8de167d7fe4af467993eb20cd094fdc7b3106892d9b21a8a90db96675df8c3f4
MD5 acdc6f134e9505659b937db0ce6d1039
SHA1 6054366c5907cfec0815315f5b5ee40de6562018
SHA512 5627f0bf7b6052bed956da8801e6124a4b786eb50a6a3bf54e73f8fb684695fc1414f35d58f7068ab460e93a8914aa857c899be0322a601f1710640d6993bb5d
SSDEEP 49152:FMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fZ:Od9AddBcryO3cICgI9Z
TLSH
T11CF57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	2026-09-30_acdc6f134e9505659b937db0ce6d1039_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	2026-09-30_acdc6f134e9505659b937db0ce6d1039_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-30_acdc6f134e9505659b937db0ce6d1039_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-30_acdc6f134e9505659b937db0ce6d1039_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:3200

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact