Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
24/07/2026, 09:17
General
- Target 2026-07-24_803243b199c83775c4afeb6550ed5485_glassworm_icedid_luca-stealer_njrat_poet-rat_stealc_vidar.exe
- Size 31.2MB
- Sample260724-k83plabl71
- SHA256 e1d8516454b99485b168b6c359aae274a341d748aeb4356b94266ef98239283b
Malware Config
Signatures
- Detects executables packed with Enigma 6 IoCs
- Loads dropped DLL 2 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-24_803243b199c83775c4afeb6550ed5485_glassworm_icedid_luca-stealer_njrat_poet-rat_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-24_803243b199c83775c4afeb6550ed5485_glassworm_icedid_luca-stealer_njrat_poet-rat_stealc_vidar.exe"1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
evb4EC3.tmp
evb4EE3.tmp
memory/3352-0-0x0000000140000000-0x00000001400CA000-memory.dmp
memory/3352-1-0x00007FFAB88FF000-0x00007FFAB8900000-memory.dmp
memory/3352-3-0x00007FFAB87A0000-0x00007FFAB8A03000-memory.dmp
memory/3352-8-0x00007FFAB87A0000-0x00007FFAB8A03000-memory.dmp
memory/3352-5-0x0000000180000000-0x0000000180020000-memory.dmp
memory/3352-10-0x00007FFAB87A0000-0x00007FFAB8A03000-memory.dmp
memory/3352-17-0x00007FFAB87A0000-0x00007FFAB8A03000-memory.dmp
memory/3352-11-0x0000000002A20000-0x0000000003EA5000-memory.dmp
memory/3352-20-0x00007FFAB87A0000-0x00007FFAB8A03000-memory.dmp
memory/3352-22-0x00000000025B0000-0x00000000025B1000-memory.dmp
memory/3352-25-0x0000000006DB0000-0x00000000074B1000-memory.dmp
memory/3352-24-0x0000000006DB0000-0x00000000074B1000-memory.dmp
memory/3352-29-0x00007FFAB87A0000-0x00007FFAB8A03000-memory.dmp
memory/3352-28-0x00007FFAB87A0000-0x00007FFAB8A03000-memory.dmp
memory/3352-23-0x0000000006DB0000-0x00000000074B1000-memory.dmp
memory/3352-26-0x00000000025C0000-0x00000000025C1000-memory.dmp
memory/3352-30-0x00000000078C0000-0x0000000007993000-memory.dmp
memory/3352-32-0x0000000002600000-0x0000000002680000-memory.dmp
memory/3352-35-0x0000000180000000-0x0000000180020000-memory.dmp
memory/3352-34-0x00007FFAB87A0000-0x00007FFAB8A03000-memory.dmp
memory/3352-36-0x0000000002A20000-0x0000000003EA5000-memory.dmp
memory/3352-33-0x00007FFAB87A0000-0x00007FFAB8A03000-memory.dmp
memory/3352-31-0x0000000002600000-0x0000000002680000-memory.dmp
memory/3352-21-0x00007FFAB87A0000-0x00007FFAB8A03000-memory.dmp
memory/3352-15-0x0000000002A20000-0x0000000003EA5000-memory.dmp
memory/3352-38-0x00000000026A0000-0x00000000026A1000-memory.dmp
memory/3352-37-0x00000000026A0000-0x00000000026A1000-memory.dmp
memory/3352-39-0x000000000AB00000-0x000000000AC92000-memory.dmp
memory/3352-41-0x0000000180000000-0x0000000180020000-memory.dmp
memory/3352-40-0x0000000140000000-0x00000001400CA000-memory.dmp
memory/3352-42-0x0000000002A20000-0x0000000003EA5000-memory.dmp
memory/3352-43-0x0000000140000000-0x00000001400CA000-memory.dmp
memory/3352-45-0x00007FFAB87A0000-0x00007FFAB8A03000-memory.dmp
memory/3352-44-0x00007FFAB88FF000-0x00007FFAB8900000-memory.dmp
memory/3352-46-0x00007FFAB87A0000-0x00007FFAB8A03000-memory.dmp
memory/3352-47-0x0000000002A20000-0x0000000003EA5000-memory.dmp
memory/3352-48-0x0000000140000000-0x00000001400CA000-memory.dmp
memory/3352-50-0x0000000002A20000-0x0000000003EA5000-memory.dmp
memory/3352-53-0x0000000002A20000-0x0000000003EA5000-memory.dmp
memory/3352-56-0x0000000002A20000-0x0000000003EA5000-memory.dmp
memory/3352-59-0x0000000002A20000-0x0000000003EA5000-memory.dmp
memory/3352-62-0x0000000002A20000-0x0000000003EA5000-memory.dmp
memory/3352-63-0x0000000140000000-0x00000001400CA000-memory.dmp
memory/3352-65-0x0000000002A20000-0x0000000003EA5000-memory.dmp
memory/3352-68-0x0000000002A20000-0x0000000003EA5000-memory.dmp
memory/3352-71-0x0000000002A20000-0x0000000003EA5000-memory.dmp
memory/3352-74-0x0000000002A20000-0x0000000003EA5000-memory.dmp
memory/3352-77-0x0000000002A20000-0x0000000003EA5000-memory.dmp
memory/3352-80-0x0000000002A20000-0x0000000003EA5000-memory.dmp
memory/3352-83-0x0000000002A20000-0x0000000003EA5000-memory.dmp
memory/3352-84-0x0000000140000000-0x00000001400CA000-memory.dmp
memory/3352-86-0x0000000002A20000-0x0000000003EA5000-memory.dmp