aa79f65bdba692c2a63f2a4047a613f6896787dd06c7edfbce7edc7c9a36b230

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 14:17

Target
2026-10-26_768b639a86876b105a18234d32cbd13e_cobalt-strike_icedid_njrat_ryuk_stealc_vidar.exe
Size 513KB
Sample261027-rl2bksst5j
SHA256 aa79f65bdba692c2a63f2a4047a613f6896787dd06c7edfbce7edc7c9a36b230
MD5 768b639a86876b105a18234d32cbd13e
SHA1 a041de30427dd2ba2137fe832d58b5100e382797
SHA512 c1750a860250a05a434b51cb68e6173bc31321487b566db90f15f0476dd8a10f0c1fe86b973f73f7a280ecd35993812c945ab4a1f8be87d6c793167d75dc941a
SSDEEP 12288:g3PWD0/C5E5pjsGAvNV94AdAIGRjoN/q8fc:g7xmd4AdA8i1
TLSH
T10AB46D5AF39D43F8E16BE17888860506F775B485132266CF43B086AA2F677F15E3E360
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	2026-10-26_768b639a86876b105a18234d32cbd13e_cobalt-strike_icedid_njrat_ryuk_stealc_vidar.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	2026-10-26_768b639a86876b105a18234d32cbd13e_cobalt-strike_icedid_njrat_ryuk_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-26_768b639a86876b105a18234d32cbd13e_cobalt-strike_icedid_njrat_ryuk_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-26_768b639a86876b105a18234d32cbd13e_cobalt-strike_icedid_njrat_ryuk_stealc_vidar.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:3180

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact