Overview

overview

10

Static

static

10

2026-07-12...at.exe

windows10-2004-x64

6

2026-07-12...at.exe

windows11-ltsc_2024-x64

6

Analysis

  • max time kernel
    149s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    12/07/2026, 08:06

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-12_f493e33e0b2febc8f398d8a2e1891427_glassworm_icedid_luca-stealer_njrat.exe
  • Size 1.7MB
  • Sample260712-jzfb9set7m
  • SHA256 4d71a727dfcfefad7198cb5b7c5b156332ac3e686d690d39cc4b2f78282db6ef
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-12_f493e33e0b2febc8f398d8a2e1891427_glassworm_icedid_luca-stealer_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-12_f493e33e0b2febc8f398d8a2e1891427_glassworm_icedid_luca-stealer_njrat.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2128
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      2⤵
        PID:2176
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
        2⤵
          PID:3636
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe"
          2⤵
            PID:4244
        • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
          "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
          1⤵
            PID:1392
          • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
            "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
            1⤵
              PID:3972

            Network

                  MITRE ATT&CK Enterprise v16

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 1KB
                  • SHA256 37f3731c4f6b37c7da27927b4dd05426e0b76880e8a4ce6f291c746e6e7c9e8e
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 1KB
                  • SHA256 98a913388c6ae59ba009305de362b71f28b17a9901b2dc5d4a2512ac4ed0dde2
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 1KB
                  • SHA256 12ca0467e6087557ac3eeae41cb8cbf58dba7a3ebdd6bcaee425abb28276f672
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 1KB
                  • SHA256 2b880515b1b16e433132e60f660422216d8fd5b6d61059d93e2079055e5ad813
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 671B
                  • SHA256 a2772fbce9f18883b3cca28cf38f156fff0340c024d3da0001c06ea5cb23a395
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 745B
                  • SHA256 1f88292e9dfd118bbb39b7cd9ce8714ec63c29c5b1179047ea542ff062690104
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download