0c016438e66ec4e8c541d717d903235385c35c7dc3323271ae29b689bb8c7000

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/10/2026, 05:33

Target
2026-10-22_8a88f1144d46d9b5f20a3392371c8d92_cobalt-strike_icedid_luca-stealer_njrat.exe
Size 192KB
Sample261024-f9ab8axt8k
SHA256 0c016438e66ec4e8c541d717d903235385c35c7dc3323271ae29b689bb8c7000
MD5 8a88f1144d46d9b5f20a3392371c8d92
SHA1 b1b3fd8da27cc4117ed80770bee03f6a991fc602
SHA512 7c9cd302de6f91e94474735510689453933f09a0ce8a7db579a3baabc699747c42362822277f09347fcdd0de2f3d2de03180bf59542b7fa3315fc86071375139
SSDEEP 3072:1/QA34A4K35VvcqblytTUvYPYmfOxImFnZfm9H5x9/ET6m5LwEb5SU/K:Zb4K3hhoQvYPPOmY5m9GToH
TLSH
T141146B59B7E500F9D073823889914656F773B8151760ABDF07A0837AAF23AD4AD3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	2026-10-22_8a88f1144d46d9b5f20a3392371c8d92_cobalt-strike_icedid_luca-stealer_njrat.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	2026-10-22_8a88f1144d46d9b5f20a3392371c8d92_cobalt-strike_icedid_luca-stealer_njrat.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-22_8a88f1144d46d9b5f20a3392371c8d92_cobalt-strike_icedid_luca-stealer_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-22_8a88f1144d46d9b5f20a3392371c8d92_cobalt-strike_icedid_luca-stealer_njrat.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:5060

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact