Analysis
- max time kernel
149s - max time network
157s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
16/05/2026, 14:00
General
- Target 2026-05-16_2a70fc8af9ed44611fa546d8cdcf79f4_glassworm_icedid_luca-stealer_njrat_poet-rat_stealc_vidar.exe
- Size 61.6MB
- Sample260516-ra95caew8w
- SHA256 3110c314bd767f0e6f254d4eb9fa0ae972df809b8557a3b38727bc05fcff5266
Malware Config
Signatures
- Custom signatureDetects executables packed with Enigma 5 IoCs
- Loads dropped DLL 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-16_2a70fc8af9ed44611fa546d8cdcf79f4_glassworm_icedid_luca-stealer_njrat_poet-rat_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-16_2a70fc8af9ed44611fa546d8cdcf79f4_glassworm_icedid_luca-stealer_njrat_poet-rat_stealc_vidar.exe"1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
evb6A8D.tmp
evb6A9E.tmp
evb6A9F.tmp
evb6DCC.tmp
evb6DCD.tmp
evb6DCE.tmp
evb6DDF.tmp
memory/392-54-0x0000000005CA0000-0x0000000005CA1000-memory.dmp
memory/392-44-0x00000000022F0000-0x000000000230D000-memory.dmp
memory/392-13-0x0000000140000000-0x0000000140DCA000-memory.dmp
memory/392-15-0x00007FFA802ED000-0x00007FFA802EE000-memory.dmp
memory/392-49-0x0000000005C90000-0x0000000005C91000-memory.dmp
memory/392-12-0x0000000002860000-0x0000000003AAD000-memory.dmp
memory/392-24-0x00007FFA80250000-0x00007FFA80445000-memory.dmp
memory/392-19-0x0000000002860000-0x0000000003AAD000-memory.dmp
memory/392-47-0x00007FFA80250000-0x00007FFA80445000-memory.dmp
memory/392-48-0x00007FFA80250000-0x00007FFA80445000-memory.dmp
memory/392-50-0x00007FFA80250000-0x00007FFA80445000-memory.dmp
memory/392-57-0x00007FFA80250000-0x00007FFA80445000-memory.dmp
memory/392-58-0x00007FFA80250000-0x00007FFA80445000-memory.dmp
memory/392-61-0x00000000021D0000-0x00000000021F8000-memory.dmp
memory/392-60-0x0000000180000000-0x0000000180025000-memory.dmp
memory/392-59-0x00007FFA80250000-0x00007FFA80445000-memory.dmp
memory/392-64-0x0000000002220000-0x000000000222C000-memory.dmp
memory/392-68-0x0000000006A50000-0x0000000006B0F000-memory.dmp
memory/392-67-0x00000000022F0000-0x000000000230D000-memory.dmp
memory/392-74-0x0000000007CB0000-0x0000000007CC6000-memory.dmp
memory/392-73-0x0000000007CB0000-0x0000000007CBB000-memory.dmp
memory/392-72-0x0000000007CB0000-0x0000000007CB1000-memory.dmp
memory/392-70-0x0000000005CF0000-0x0000000005CF1000-memory.dmp
memory/392-69-0x0000000005CF0000-0x0000000005CF1000-memory.dmp
memory/392-66-0x0000000002250000-0x00000000022D8000-memory.dmp
memory/392-65-0x00007FFA80250000-0x00007FFA80445000-memory.dmp
memory/392-63-0x0000000002200000-0x000000000221F000-memory.dmp
memory/392-62-0x0000000002860000-0x0000000003AAD000-memory.dmp
memory/392-56-0x00007FFA80250000-0x00007FFA80445000-memory.dmp
memory/392-6-0x00000000021D0000-0x00000000021F8000-memory.dmp
memory/392-53-0x0000000006040000-0x000000000644D000-memory.dmp
memory/392-52-0x0000000006040000-0x000000000644D000-memory.dmp
memory/392-16-0x00007FFA80250000-0x00007FFA80445000-memory.dmp
memory/392-2-0x0000000180000000-0x0000000180025000-memory.dmp
memory/392-103-0x0000000002860000-0x0000000003AAD000-memory.dmp
memory/392-51-0x0000000006040000-0x000000000644D000-memory.dmp
memory/392-42-0x00000000022F0000-0x000000000230D000-memory.dmp
memory/392-39-0x00007FFA80250000-0x00007FFA80445000-memory.dmp
memory/392-35-0x0000000002200000-0x000000000221F000-memory.dmp
memory/392-33-0x0000000002200000-0x000000000221F000-memory.dmp
memory/392-29-0x0000000002250000-0x00000000022D8000-memory.dmp
memory/392-27-0x0000000002250000-0x00000000022D8000-memory.dmp
memory/392-8-0x00000000021D0000-0x00000000021F8000-memory.dmp
memory/392-22-0x00007FFA80250000-0x00007FFA80445000-memory.dmp
memory/392-82-0x00000000022F0000-0x000000000230D000-memory.dmp
memory/392-79-0x0000000002250000-0x00000000022D8000-memory.dmp
memory/392-75-0x0000000140000000-0x0000000140DCA000-memory.dmp
memory/392-78-0x0000000002860000-0x0000000003AAD000-memory.dmp
memory/392-77-0x00000000021D0000-0x00000000021F8000-memory.dmp
memory/392-76-0x0000000180000000-0x0000000180025000-memory.dmp
memory/392-83-0x00007FFA80250000-0x00007FFA80445000-memory.dmp
memory/392-86-0x00000000021D0000-0x00000000021F8000-memory.dmp
memory/392-84-0x0000000140000000-0x0000000140DCA000-memory.dmp
memory/392-87-0x0000000002860000-0x0000000003AAD000-memory.dmp
memory/392-92-0x0000000140000000-0x0000000140DCA000-memory.dmp
memory/392-95-0x0000000002860000-0x0000000003AAD000-memory.dmp
memory/392-100-0x0000000140000000-0x0000000140DCA000-memory.dmp
memory/392-46-0x00007FFA80250000-0x00007FFA80445000-memory.dmp
memory/392-111-0x0000000002860000-0x0000000003AAD000-memory.dmp
memory/392-119-0x0000000002860000-0x0000000003AAD000-memory.dmp
memory/392-127-0x0000000002860000-0x0000000003AAD000-memory.dmp
memory/392-135-0x0000000002860000-0x0000000003AAD000-memory.dmp
memory/392-143-0x0000000002860000-0x0000000003AAD000-memory.dmp
memory/392-151-0x0000000002860000-0x0000000003AAD000-memory.dmp
memory/392-159-0x0000000002860000-0x0000000003AAD000-memory.dmp
memory/392-167-0x0000000002860000-0x0000000003AAD000-memory.dmp
memory/392-175-0x0000000002860000-0x0000000003AAD000-memory.dmp
memory/392-183-0x0000000002860000-0x0000000003AAD000-memory.dmp