Analysis
- max time kernel
150s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
24/07/2026, 09:17
General
- Target 2026-07-24_803243b199c83775c4afeb6550ed5485_glassworm_icedid_luca-stealer_njrat_poet-rat_stealc_vidar.exe
- Size 31.2MB
- Sample260724-k83plabl71
- SHA256 e1d8516454b99485b168b6c359aae274a341d748aeb4356b94266ef98239283b
Malware Config
Signatures
- Detects executables packed with Enigma 3 IoCs
- Loads dropped DLL 2 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-24_803243b199c83775c4afeb6550ed5485_glassworm_icedid_luca-stealer_njrat_poet-rat_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-24_803243b199c83775c4afeb6550ed5485_glassworm_icedid_luca-stealer_njrat_poet-rat_stealc_vidar.exe"1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
evb4A0.tmp
evb4B0.tmp
memory/4580-28-0x00000000060D0000-0x00000000060D1000-memory.dmp
memory/4580-35-0x0000000007AA0000-0x0000000007AA1000-memory.dmp
memory/4580-9-0x00007FFF277B0000-0x00007FFF279A5000-memory.dmp
memory/4580-4-0x0000000180000000-0x0000000180020000-memory.dmp
memory/4580-2-0x00007FFF2784D000-0x00007FFF2784E000-memory.dmp
memory/4580-10-0x0000000002890000-0x0000000003D15000-memory.dmp
memory/4580-15-0x00007FFF277B0000-0x00007FFF279A5000-memory.dmp
memory/4580-14-0x0000000002890000-0x0000000003D15000-memory.dmp
memory/4580-23-0x00007FFF277B0000-0x00007FFF279A5000-memory.dmp
memory/4580-27-0x0000000006390000-0x0000000006A91000-memory.dmp
memory/4580-26-0x0000000006390000-0x0000000006A91000-memory.dmp
memory/4580-31-0x0000000180000000-0x0000000180020000-memory.dmp
memory/4580-34-0x0000000006100000-0x0000000006180000-memory.dmp
memory/4580-20-0x00007FFF277B0000-0x00007FFF279A5000-memory.dmp
memory/4580-36-0x0000000007AA0000-0x0000000007AA1000-memory.dmp
memory/4580-21-0x00007FFF277B0000-0x00007FFF279A5000-memory.dmp
memory/4580-37-0x000000000A580000-0x000000000A712000-memory.dmp
memory/4580-32-0x0000000006EA0000-0x0000000006F73000-memory.dmp
memory/4580-30-0x0000000002890000-0x0000000003D15000-memory.dmp
memory/4580-24-0x00000000060C0000-0x00000000060C1000-memory.dmp
memory/4580-0-0x0000000140000000-0x00000001400CA000-memory.dmp
memory/4580-25-0x0000000006390000-0x0000000006A91000-memory.dmp
memory/4580-8-0x00007FFF277B0000-0x00007FFF279A5000-memory.dmp
memory/4580-22-0x00007FFF277B0000-0x00007FFF279A5000-memory.dmp
memory/4580-33-0x0000000006100000-0x0000000006180000-memory.dmp
memory/4580-19-0x00007FFF277B0000-0x00007FFF279A5000-memory.dmp
memory/4580-38-0x0000000140000000-0x00000001400CA000-memory.dmp
memory/4580-39-0x0000000180000000-0x0000000180020000-memory.dmp
memory/4580-40-0x0000000002890000-0x0000000003D15000-memory.dmp
memory/4580-41-0x0000000140000000-0x00000001400CA000-memory.dmp
memory/4580-42-0x00007FFF277B0000-0x00007FFF279A5000-memory.dmp
memory/4580-43-0x0000000002890000-0x0000000003D15000-memory.dmp
memory/4580-46-0x0000000002890000-0x0000000003D15000-memory.dmp
memory/4580-49-0x0000000002890000-0x0000000003D15000-memory.dmp
memory/4580-52-0x0000000002890000-0x0000000003D15000-memory.dmp
memory/4580-55-0x0000000002890000-0x0000000003D15000-memory.dmp
memory/4580-58-0x0000000002890000-0x0000000003D15000-memory.dmp
memory/4580-61-0x0000000002890000-0x0000000003D15000-memory.dmp
memory/4580-64-0x0000000002890000-0x0000000003D15000-memory.dmp
memory/4580-67-0x0000000002890000-0x0000000003D15000-memory.dmp
memory/4580-70-0x0000000002890000-0x0000000003D15000-memory.dmp
memory/4580-73-0x0000000002890000-0x0000000003D15000-memory.dmp
memory/4580-76-0x0000000002890000-0x0000000003D15000-memory.dmp
memory/4580-79-0x0000000002890000-0x0000000003D15000-memory.dmp
memory/4580-82-0x0000000002890000-0x0000000003D15000-memory.dmp