a8f62726784d5878a4d8777b3d9cd9113aaf11a1f6a691875292b0b23295726d

Analysis

max time kernel
149s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/11/2026, 09:25

Target
2026-11-10_1adde2bbabebe1f5d8b1b270287850f2_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Size 430KB
Sample261110-ldvaeav19r
SHA256 a8f62726784d5878a4d8777b3d9cd9113aaf11a1f6a691875292b0b23295726d
MD5 1adde2bbabebe1f5d8b1b270287850f2
SHA1 46eea7842f71dafaca83b64e79edc648de88bf40
SHA512 9bd029647592e7b6f917eb394386206089c3619a296497323b70b3679c856cd0b813072f91490b62a274c6f8b538e3dd32e0e4d50d8efbc31b044b1813eb8f99
SSDEEP 6144:/FtWBWxy1BDhthwTT4s8XyLEH8R6uLzIOIg22/Pu38:q8OBlkGcEcRln5638
TLSH
T1EA947E2AD79901FCE1A7D178CE525942DB767C0E03A1EADF07C449721E276E09E3EB12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Reads the TCP/IP host and domain name from the registry 1 TTPs 1 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

System Network Configuration Discovery

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	2026-11-10_1adde2bbabebe1f5d8b1b270287850f2_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-11-10_1adde2bbabebe1f5d8b1b270287850f2_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-10_1adde2bbabebe1f5d8b1b270287850f2_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:4676

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact