Overview

overview

10

Static

static

10

2026-07-04...at.exe

windows10-2004-x64

6

2026-07-04...at.exe

windows11-ltsc_2024-x64

6

Analysis

  • max time kernel
    148s
  • max time network
    128s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260629-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    04/07/2026, 10:35

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-04_46441d410b4f7ce990559411aad6cc48_glassworm_icedid_luca-stealer_njrat.exe
  • Size 1.7MB
  • Sample260704-mmp8gset3x
  • SHA256 de1c7a0a99236ab260fad243798a22fb210afeb0a7ad09a6e412a8dff3fffb57
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-04_46441d410b4f7ce990559411aad6cc48_glassworm_icedid_luca-stealer_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-04_46441d410b4f7ce990559411aad6cc48_glassworm_icedid_luca-stealer_njrat.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2516
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      2⤵
        PID:724
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
        2⤵
          PID:1236
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe"
          2⤵
            PID:3060
        • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
          "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
          1⤵
            PID:5384
          • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
            "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
            1⤵
              PID:1120

            Network

                  MITRE ATT&CK Enterprise v16

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 1KB
                  • SHA256 9210e99e6820bba7a3b843bddef2c5adf28b96a75b689fd4d96708ceb904f6b5
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 1KB
                  • SHA256 9fc8215178b3815e7d7858ddbba3fd82acaada51f7a271ab80be79f2dc35323d
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 1KB
                  • SHA256 9b4df73481ab4efb02d7bb1ee1d536637e807fbcf4b3692bf38b48a63157fca5
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 1KB
                  • SHA256 8518e892d9cb5f72b73adc4dbd8866c3eb48de92586b89c8935e9e7ac58b8087
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 671B
                  • SHA256 33afe3b2c3e36bd2e1946bf469ec12afcf9e886c9d371ba18633c88924b313b8
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 745B
                  • SHA256 62d12130eb3fb6ed1bd7a83fc514f89a3cf36db7e6a1274d761a9ed81c66810d
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download