e343278d37a4754c78d8443f407ec9c72d4f77c9506d2bb2dc43bf56c993b9e4

Analysis

max time kernel
149s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/11/2026, 23:09

Target
2026-11-09_9d48741cc828c628b3262a9dd9a9b1f3_cobalt-strike_icedid_njrat_satacom_stealc.exe
Size 623KB
Sample261109-25f5vsbb78
SHA256 e343278d37a4754c78d8443f407ec9c72d4f77c9506d2bb2dc43bf56c993b9e4
MD5 9d48741cc828c628b3262a9dd9a9b1f3
SHA1 6a0f23850f1f11c20aa560e7f96951911bc44657
SHA512 f3ec7c2cf3376cbce5432afbc7c4d1aebc18839b519bf0e7838c68e9f1fb9406e4bb6df992884fa69272dcaf01381889739f081c6b4f7bdf04a610cce7e9533c
SSDEEP 6144:aEOqNAdZH7oKXVXf0QBiG4fia6gjsY9APxGDTKSktLAChiRJNJ3oPFZWB1Qc/jV/:aEcFV0QB54fiaxjsY9xoG3Yc1vdF5m
TLSH
T11BD47D56EBA503F8D17BC1B4CA828856EB76F815433456CB03E249635F3B6A05B3EF21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 1 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	2026-11-09_9d48741cc828c628b3262a9dd9a9b1f3_cobalt-strike_icedid_njrat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-11-09_9d48741cc828c628b3262a9dd9a9b1f3_cobalt-strike_icedid_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-09_9d48741cc828c628b3262a9dd9a9b1f3_cobalt-strike_icedid_njrat_satacom_stealc.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:3908

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact