de39a2f18c88cc3c4c0959d884230bb443bdb71272a02fc6b065106e8fa48913

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/10/2026, 23:41

Target
2026-10-17_965b1095638343d5d5f3a5cad464bc3a_hijackloader_icedid_njrat.exe
Size 5.0MB
Sample261018-3pspdst15j
SHA256 de39a2f18c88cc3c4c0959d884230bb443bdb71272a02fc6b065106e8fa48913
MD5 965b1095638343d5d5f3a5cad464bc3a
SHA1 5274aceeb969d0f1fece58551383c14a946b8eb5
SHA512 919adb716bbf04901cd5d332b649094230c34e4179808b092f439ef488ff75f4dbb73d69bf4a33ef3a551a9ef784699ae11322b20d033d4475915c8083232619
SSDEEP 98304:HK/i232b24202X2X2r232b222C2A2D2c232I2t2E2kHxKTH2w2Rsu2:qq232b24202X2X2r232b222C2A2D2c2T
TLSH
T144364A2670C2B099D4EB8A782D5674EA68AC3D019339D55E280BB77B06F3701DD2F727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	2026-10-17_965b1095638343d5d5f3a5cad464bc3a_hijackloader_icedid_njrat.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	2026-10-17_965b1095638343d5d5f3a5cad464bc3a_hijackloader_icedid_njrat.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-17_965b1095638343d5d5f3a5cad464bc3a_hijackloader_icedid_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-17_965b1095638343d5d5f3a5cad464bc3a_hijackloader_icedid_njrat.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:4084

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact