Analysis
- max time kernel
149s - max time network
81s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
- submitted
16/05/2026, 14:00
General
- Target 2026-05-16_2a70fc8af9ed44611fa546d8cdcf79f4_glassworm_icedid_luca-stealer_njrat_poet-rat_stealc_vidar.exe
- Size 61.6MB
- Sample260516-ra95caew8w
- SHA256 3110c314bd767f0e6f254d4eb9fa0ae972df809b8557a3b38727bc05fcff5266
Malware Config
Signatures
- Custom signatureDetects executables packed with Enigma 5 IoCs
- Loads dropped DLL 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-16_2a70fc8af9ed44611fa546d8cdcf79f4_glassworm_icedid_luca-stealer_njrat_poet-rat_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-16_2a70fc8af9ed44611fa546d8cdcf79f4_glassworm_icedid_luca-stealer_njrat_poet-rat_stealc_vidar.exe"1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
evbC8CA.tmp
evbC8CB.tmp
evbC8DC.tmp
evbCA64.tmp
evbCA65.tmp
evbCA75.tmp
evbCA86.tmp
memory/1248-34-0x0000000002310000-0x000000000232F000-memory.dmp
memory/1248-65-0x0000000140000000-0x0000000140DCA000-memory.dmp
memory/1248-20-0x00007FFC2C440000-0x00007FFC2C649000-memory.dmp
memory/1248-13-0x0000000002950000-0x0000000003B9D000-memory.dmp
memory/1248-15-0x00007FFC2C440000-0x00007FFC2C649000-memory.dmp
memory/1248-36-0x0000000002310000-0x000000000232F000-memory.dmp
memory/1248-44-0x0000000002370000-0x000000000238D000-memory.dmp
memory/1248-50-0x0000000005E10000-0x0000000005E11000-memory.dmp
memory/1248-49-0x00000000060B0000-0x00000000064BD000-memory.dmp
memory/1248-52-0x0000000002950000-0x0000000003B9D000-memory.dmp
memory/1248-58-0x0000000002310000-0x000000000232F000-memory.dmp
memory/1248-57-0x0000000002280000-0x0000000002308000-memory.dmp
memory/1248-56-0x0000000006B00000-0x0000000006BBF000-memory.dmp
memory/1248-55-0x00007FFC2C440000-0x00007FFC2C649000-memory.dmp
memory/1248-54-0x0000000002370000-0x000000000238D000-memory.dmp
memory/1248-53-0x0000000002330000-0x000000000233C000-memory.dmp
memory/1248-47-0x00000000060B0000-0x00000000064BD000-memory.dmp
memory/1248-46-0x0000000005E00000-0x0000000005E01000-memory.dmp
memory/1248-48-0x00000000060B0000-0x00000000064BD000-memory.dmp
memory/1248-42-0x0000000002370000-0x000000000238D000-memory.dmp
memory/1248-59-0x00000000064C0000-0x00000000064C1000-memory.dmp
memory/1248-60-0x00000000064C0000-0x00000000064C1000-memory.dmp
memory/1248-14-0x00007FFC2C4E4000-0x00007FFC2C4E5000-memory.dmp
memory/1248-64-0x00000000064C0000-0x00000000064D6000-memory.dmp
memory/1248-63-0x00000000064C0000-0x00000000064CB000-memory.dmp
memory/1248-61-0x00000000064C0000-0x00000000064C1000-memory.dmp
memory/1248-12-0x0000000140000000-0x0000000140DCA000-memory.dmp
memory/1248-6-0x0000000002250000-0x0000000002278000-memory.dmp
memory/1248-30-0x0000000002280000-0x0000000002308000-memory.dmp
memory/1248-8-0x0000000002250000-0x0000000002278000-memory.dmp
memory/1248-2-0x0000000180000000-0x0000000180025000-memory.dmp
memory/1248-27-0x0000000002250000-0x0000000002278000-memory.dmp
memory/1248-28-0x0000000002280000-0x0000000002308000-memory.dmp
memory/1248-19-0x0000000002950000-0x0000000003B9D000-memory.dmp
memory/1248-66-0x00007FFC2C440000-0x00007FFC2C649000-memory.dmp
memory/1248-26-0x0000000180000000-0x0000000180025000-memory.dmp
memory/1248-67-0x0000000002950000-0x0000000003B9D000-memory.dmp
memory/1248-75-0x0000000002370000-0x000000000238D000-memory.dmp
memory/1248-70-0x0000000002250000-0x0000000002278000-memory.dmp
memory/1248-72-0x0000000002280000-0x0000000002308000-memory.dmp
memory/1248-71-0x0000000002950000-0x0000000003B9D000-memory.dmp
memory/1248-76-0x00007FFC2C440000-0x00007FFC2C649000-memory.dmp
memory/1248-69-0x0000000180000000-0x0000000180025000-memory.dmp
memory/1248-77-0x0000000140000000-0x0000000140DCA000-memory.dmp
memory/1248-80-0x0000000002950000-0x0000000003B9D000-memory.dmp
memory/1248-79-0x0000000002250000-0x0000000002278000-memory.dmp
memory/1248-87-0x0000000002250000-0x0000000002278000-memory.dmp
memory/1248-85-0x0000000140000000-0x0000000140DCA000-memory.dmp
memory/1248-88-0x0000000002950000-0x0000000003B9D000-memory.dmp
memory/1248-93-0x0000000140000000-0x0000000140DCA000-memory.dmp
memory/1248-96-0x0000000002950000-0x0000000003B9D000-memory.dmp
memory/1248-104-0x0000000002950000-0x0000000003B9D000-memory.dmp
memory/1248-112-0x0000000002950000-0x0000000003B9D000-memory.dmp
memory/1248-120-0x0000000002950000-0x0000000003B9D000-memory.dmp
memory/1248-128-0x0000000002950000-0x0000000003B9D000-memory.dmp
memory/1248-136-0x0000000002950000-0x0000000003B9D000-memory.dmp
memory/1248-144-0x0000000002950000-0x0000000003B9D000-memory.dmp
memory/1248-152-0x0000000002950000-0x0000000003B9D000-memory.dmp
memory/1248-160-0x0000000002950000-0x0000000003B9D000-memory.dmp
memory/1248-168-0x0000000002950000-0x0000000003B9D000-memory.dmp
memory/1248-176-0x0000000002950000-0x0000000003B9D000-memory.dmp