Overview

overview

10

Static

static

10

2026-07-12...at.exe

windows10-2004-x64

6

2026-07-12...at.exe

windows11-ltsc_2024-x64

6

Analysis

  • max time kernel
    148s
  • max time network
    110s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    12/07/2026, 08:06

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-12_f493e33e0b2febc8f398d8a2e1891427_glassworm_icedid_luca-stealer_njrat.exe
  • Size 1.7MB
  • Sample260712-jzfb9set7m
  • SHA256 4d71a727dfcfefad7198cb5b7c5b156332ac3e686d690d39cc4b2f78282db6ef
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-12_f493e33e0b2febc8f398d8a2e1891427_glassworm_icedid_luca-stealer_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-12_f493e33e0b2febc8f398d8a2e1891427_glassworm_icedid_luca-stealer_njrat.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4596
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      2⤵
        PID:8
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
        2⤵
          PID:4736
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe"
          2⤵
            PID:4344
        • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
          "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
          1⤵
            PID:2032
          • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
            "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
            1⤵
              PID:5688

            Network

                  MITRE ATT&CK Enterprise v16

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 1KB
                  • SHA256 a06ac3b2d41d14764c3e8ee304e121033b8ca0ab8454732e531bb64a7cc870b5
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 1KB
                  • SHA256 f0c8f2e02a99c0e082c25442662b646f9a748251f4c751b27c82f56502a774e5
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 1KB
                  • SHA256 af857bbac680b47386c53929271f1d339122fa812256f0db3a46c87891f49fe6
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 1KB
                  • SHA256 7c7d97b94611fbfcc014fc6e5328c5692053a1a7f71e3b2a788e36597bb91e08
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 671B
                  • SHA256 7b845f105d497326089abf0799396e6fda508d4838f9968a567d6e133468c887
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 745B
                  • SHA256 242f2b9bfaadcd5fab4da71958240cc4c1715ecc6d0d3549042469bb0769d5c8
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download