520d6cb9eb4dbe72d7a23d1d31c5d36bbf767f9cc0fe648602397c44827e61fc

Analysis

max time kernel
149s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/10/2026, 14:06

Target
2026-10-22_4a95d1ec520275aa824788550c84c360_cobalt-strike_glassworm_icedid_satacom.exe
Size 9.0MB
Sample261024-red8gaat6w
SHA256 520d6cb9eb4dbe72d7a23d1d31c5d36bbf767f9cc0fe648602397c44827e61fc
MD5 4a95d1ec520275aa824788550c84c360
SHA1 330dfd20b0d1bb91c6d243cfda40514b58578882
SHA512 d0914400afd07457e06a3037acd05e1d7854bb1d0e0e85cf3f87c5b421e4242f348a4f074ab57b6ea93a1eed98dc8a2d9c4e6f11841f98b5a2696f08c705d45c
SSDEEP 98304:HLku/WyZeJp8GMoI9ZJfSgmCFoMQT6gsYHKjxumcguOBmesfH7VJy1H+n:3ZOHQFoWgRqFbB/6bV0F
TLSH
T1EA962943F66691ECC16AC174871A6233FB71BC8D0B247AE75BD08B213E66F906A3D714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	2026-10-22_4a95d1ec520275aa824788550c84c360_cobalt-strike_glassworm_icedid_satacom.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	2026-10-22_4a95d1ec520275aa824788550c84c360_cobalt-strike_glassworm_icedid_satacom.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-22_4a95d1ec520275aa824788550c84c360_cobalt-strike_glassworm_icedid_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-22_4a95d1ec520275aa824788550c84c360_cobalt-strike_glassworm_icedid_satacom.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:6128

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact