4484f019d379310247cbeef2849cbe23ad8ac21fb95ddde49afb0755e831d652

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/11/2026, 19:34

Target
2026-11-06_ed67da660b3466d7b7e1c1149172f338_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 623KB
Sample261107-x933za1vb1
SHA256 4484f019d379310247cbeef2849cbe23ad8ac21fb95ddde49afb0755e831d652
MD5 ed67da660b3466d7b7e1c1149172f338
SHA1 28ca075e5d774ba238ce2ccf490e427f9558971f
SHA512 0b7f9b4dd5913c53aa48cd82dea8a90a8ca7bac855a1a3504fa9838ef12ddbb9a770c239da853a9667fdee436f04c2a671fadfb988adc23dfa2ee38a72a01a64
SSDEEP 6144:W8OqNAdZH7oKXVXf0QBiG4fia6gjsY9APxGDTKSktLAChiRJNJ3oPFZWB1Qc/jVI:W8cFV0QB54fiaxjsY9xoG3Yc1vdF5m
TLSH
T1CAD47D56EBA403F8D17BC1B4CA828856EB76B855433456CB03E249635F3B6E05B3EF21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 1 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	2026-11-06_ed67da660b3466d7b7e1c1149172f338_cobalt-strike_icedid_njrat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-11-06_ed67da660b3466d7b7e1c1149172f338_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-06_ed67da660b3466d7b7e1c1149172f338_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:4408

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact