5cc7955e86b3a808281a36575544e43442c9001bc9d7a9013d9ec84c1e18217c

Analysis

max time kernel
149s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 03:21

Target
2026-11-01_f283e09940ea3987c038f9cff9a75036_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Size 3.3MB
Sample261102-dwhekazxcs
SHA256 5cc7955e86b3a808281a36575544e43442c9001bc9d7a9013d9ec84c1e18217c
MD5 f283e09940ea3987c038f9cff9a75036
SHA1 fa12c27defa3b26a4674d6ede815c10bb7d08bf7
SHA512 5eedc4ac39f0cec8b581734e0b553218fa95c702c1a81d15b9e77ac3fa45fd808db4b01882b56d0e8cda5933003c57e771d5cfaf9c4ffd8e09aa60931fae6fe2
SSDEEP 49152:tMSGj9zai9bsddr7AaPcZumeRQyKpzSPQBcnMFvf8AC4Z78bRwlI5fL:Gd9AddBcryO3cICgI9L
TLSH
T168F57CD2A7A600E8E977F23CC9568517E7F2B81713709BCF25A44A660F236D12B3E741
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	2026-11-01_f283e09940ea3987c038f9cff9a75036_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	2026-11-01_f283e09940ea3987c038f9cff9a75036_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe

C:\Users\Admin\AppData\Local\Temp\2026-11-01_f283e09940ea3987c038f9cff9a75036_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-01_f283e09940ea3987c038f9cff9a75036_coinminer_glassworm_icedid_njrat_ransomhub_ryuk_sliver.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:2428

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact