7ff52b7d9918e9f049d119cf8437bc90c5dc7d032aa65e4c9f7775f96a465a44

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/10/2026, 16:27

Target
2026-10-01_3b37102f10863330a2fe6658cd6058af_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 620KB
Sample261002-tx48qaxgrf
SHA256 7ff52b7d9918e9f049d119cf8437bc90c5dc7d032aa65e4c9f7775f96a465a44
MD5 3b37102f10863330a2fe6658cd6058af
SHA1 c2b47dd2650965acffa3b5e72daf30d624a2c094
SHA512 672f7d7bc539c19472d753c4451e3ae48fcbc329007c50615a237c73f516fe01c74a54ecaa28a892df8d1744a7a307f1228c9408bd0d18d6d7e9490e64647583
SSDEEP 6144:qKOEx+/9I7iIPqiSomRTcWbHiddZZSuXx2+4bPKm4+WCTNZil10lAJNxcGUv1ocI:qK+MFSoiTcWbCddgo1Tb2vGcqgp
TLSH
T165D47C56EBE402F9D17BC1B4CA829856EB77B855133065CB03E209675F3B6A05F3EB20
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	2026-10-01_3b37102f10863330a2fe6658cd6058af_cobalt-strike_icedid_njrat_satacom_stealc.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	2026-10-01_3b37102f10863330a2fe6658cd6058af_cobalt-strike_icedid_njrat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-01_3b37102f10863330a2fe6658cd6058af_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-01_3b37102f10863330a2fe6658cd6058af_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:4472

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact