7069a7bd27a30f134c2c0babfd7196561fdd1a96667bbf06a5433e29e2ea0a6f

Analysis

max time kernel
148s
max time network
21s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/10/2026, 11:41

Target
2026-10-13_6a2c9d510ae3dd2881dfbcc4f83fcb92_icedid_njrat_ryuk.exe
Size 205KB
Sample261015-ntq9sscs2x
SHA256 7069a7bd27a30f134c2c0babfd7196561fdd1a96667bbf06a5433e29e2ea0a6f
MD5 6a2c9d510ae3dd2881dfbcc4f83fcb92
SHA1 5f245fc6da0fbc138ab643ec4747b12e95661f45
SHA512 e81dcbc102ddc9fe01eb3518bc41f182dddc4423654a171e483dffc34542a2760c860452520d03bb680e5762b829a1e332a65fc0cad94f7123033f3dc39b4ce9
SSDEEP 6144:Tg9SDmUQAXLbfSGh0lF+CLsScjdSsaF6:E9SDmUDXPfClFmjdm
TLSH
T18E247B0DB7A410FDE077813AC9521626F2B3741517619ADF1368437AAF236E4AF3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	2026-10-13_6a2c9d510ae3dd2881dfbcc4f83fcb92_icedid_njrat_ryuk.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	2026-10-13_6a2c9d510ae3dd2881dfbcc4f83fcb92_icedid_njrat_ryuk.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-13_6a2c9d510ae3dd2881dfbcc4f83fcb92_icedid_njrat_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-13_6a2c9d510ae3dd2881dfbcc4f83fcb92_icedid_njrat_ryuk.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:5296

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact