f4d21845122744a552611c2bc9a5e79dfd55cd82727e247a2ecce04a05c701a7

Analysis

max time kernel
150s
max time network
115s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 22:17

Target
2026-11-02_ceeaebae0baa675c51898c174113e52f_avaddon_glassworm_icedid_luca-stealer_megazord_njrat_stealc.exe
Size 16.0MB
Sample261102-17dxvadv8x
SHA256 f4d21845122744a552611c2bc9a5e79dfd55cd82727e247a2ecce04a05c701a7
MD5 ceeaebae0baa675c51898c174113e52f
SHA1 bf2e20d894da8c182bf28ae6464e3c0417e96b0b
SHA512 ab00c880d833db4b84e4bc7057d75417d439dcec11d0a58bd748645810a91462e61e6c8ca286ed690568a890c445b920c46911bf0c89dc7b9ba140600fec37dd
SSDEEP 196608:Ui18lBr+baJwXTrKUcy1+OwfEUrwSbfGMPktWlW:918lBr+PrKUcy1+OwfleMPk
TLSH
T1DCF69E5B629402E8E077C17DCA9B5F07EBB1381903229BDB05E4C76A2F57AE44E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	2026-11-02_ceeaebae0baa675c51898c174113e52f_avaddon_glassworm_icedid_luca-stealer_megazord_njrat_stealc.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	2026-11-02_ceeaebae0baa675c51898c174113e52f_avaddon_glassworm_icedid_luca-stealer_megazord_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-11-02_ceeaebae0baa675c51898c174113e52f_avaddon_glassworm_icedid_luca-stealer_megazord_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-02_ceeaebae0baa675c51898c174113e52f_avaddon_glassworm_icedid_luca-stealer_megazord_njrat_stealc.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:4084

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact