2c3786c9a86c9d411eec02e69bf818a4257f4dd182d696e6a8d47778987776ba

Analysis

max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
17/10/2026, 07:38

Target
2026-10-16_c1ab25705e96c1b8a221198b6bf5f9bd_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Size 38.7MB
Sample261017-jgrbtab16v
SHA256 2c3786c9a86c9d411eec02e69bf818a4257f4dd182d696e6a8d47778987776ba
MD5 c1ab25705e96c1b8a221198b6bf5f9bd
SHA1 b3b7ccc1792b043876f623856bafc10da9e96f7e
SHA512 eb2ccb3266481de0c14c72f81d6743c83d013b42b83549b769f715ec10b1c253972412acef87c5771d2d04c7979bda6612b6a7bc0cef42c806a41b973384bd62
SSDEEP 393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYfe:fMguj8Q4Vfv3qFTrYNqo
TLSH
T149978C0773E600A5E5B3D2388AA74103E773B4675731CADF325D07552FABAE09A7A720
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	2026-10-16_c1ab25705e96c1b8a221198b6bf5f9bd_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	2026-10-16_c1ab25705e96c1b8a221198b6bf5f9bd_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-16_c1ab25705e96c1b8a221198b6bf5f9bd_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-16_c1ab25705e96c1b8a221198b6bf5f9bd_byakugan_cobalt-strike_coinminer_glassworm_icedid_njrat_.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:2060

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact