08f817d399bbad41fac3eee9a4df7c83b9eb30208b2aa55b69b05b0413c92ecc

Analysis

max time kernel
150s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/10/2026, 03:48

Target
2026-10-01_c15dad395854dca26ae8a553f9cf8425_cobalt-strike_helldown_icedid_njrat_remcos_satacom_stealc.exe
Size 796KB
Sample261002-ec7e1sge62
SHA256 08f817d399bbad41fac3eee9a4df7c83b9eb30208b2aa55b69b05b0413c92ecc
MD5 c15dad395854dca26ae8a553f9cf8425
SHA1 f239c30e95603e563e26de5d4e09252671472b55
SHA512 b3b36cd13c964c57cc9ee5006549104266741c658055bb6d09d053975b6ef1143e5b5eea2a0297363149f908985217fc1cb48b5fd94db48d3f7e693f3a24783d
SSDEEP 12288:jO2ITFu5+tRBlicU3U0pGQGDYAMFaAv/PvQQnNiIFOJP:q2KFu52RB893dGDYASvnvQgyJP
TLSH
T1DF056C65EBA804F9D467C278C9535603EBB2B80A1360B7DF07D54A6A1F23BE54E3E311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	2026-10-01_c15dad395854dca26ae8a553f9cf8425_cobalt-strike_helldown_icedid_njrat_remcos_satacom_stealc.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	2026-10-01_c15dad395854dca26ae8a553f9cf8425_cobalt-strike_helldown_icedid_njrat_remcos_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-01_c15dad395854dca26ae8a553f9cf8425_cobalt-strike_helldown_icedid_njrat_remcos_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-01_c15dad395854dca26ae8a553f9cf8425_cobalt-strike_helldown_icedid_njrat_remcos_satacom_stealc.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:1592

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact