580c6e174dcb5eef9bfb8651942fa3d32fe2753d3d028e18c418fb54457c52d0

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 14:58

Target
2026-10-01_4eb5d280d8b3e7a5b8618d8edaf3c781_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Size 3.3MB
Sample261002-scelwsv1cw
SHA256 580c6e174dcb5eef9bfb8651942fa3d32fe2753d3d028e18c418fb54457c52d0
MD5 4eb5d280d8b3e7a5b8618d8edaf3c781
SHA1 4b8674d3d6016d4978d333a69d87a5329aa57f12
SHA512 fa69808e06ca96dd3d393f31e19aa8e573023e9759634757691a7f052c00e654b558d3619ca3f019e34abfca14f94659a223b23a9a91e781cc686460ec571956
SSDEEP 49152:LMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlG5XU:Id9AddBcryO3cICgGtU
TLSH
T1C9F57CD2A7A600E8D977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E742
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	2026-10-01_4eb5d280d8b3e7a5b8618d8edaf3c781_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	2026-10-01_4eb5d280d8b3e7a5b8618d8edaf3c781_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-01_4eb5d280d8b3e7a5b8618d8edaf3c781_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-01_4eb5d280d8b3e7a5b8618d8edaf3c781_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:3876

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact