Analysis
- max time kernel
149s - max time network
140s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
26/07/2026, 23:50
General
- Target 2026-07-26_7d6d927f60656d9735785afbe0f80d67_amadey_glassworm_hijackloader_icedid_luca-stealer_njrat_poet-rat_stealc_vidar.exe
- Size 10.8MB
- Sample260726-3vnbvsshke
- SHA256 129d27be8e151964e9b8ccd6f2a75e25ecf6aed48fd369e3b95588056b0143ca
Malware Config
Signatures
- Detects executables containing URLs to raw contents of a Github gist 1 IoCs
- Detects executables manipulated with Fody 1 IoCs
- Loads dropped DLL 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-26_7d6d927f60656d9735785afbe0f80d67_amadey_glassworm_hijackloader_icedid_luca-stealer_njrat_poet-rat_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-26_7d6d927f60656d9735785afbe0f80d67_amadey_glassworm_hijackloader_icedid_luca-stealer_njrat_poet-rat_stealc_vidar.exe"1⤵
- Loads dropped DLL
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
interception.dll
memory/5368-11-0x00007FFCECD90000-0x00007FFCED734000-memory.dmp
memory/5368-13-0x00007FFCECD90000-0x00007FFCED734000-memory.dmp
memory/5368-4-0x00007FFCECD90000-0x00007FFCED734000-memory.dmp
memory/5368-3-0x00007FFCECD90000-0x00007FFCED734000-memory.dmp
memory/5368-9-0x00007FFCECD90000-0x00007FFCED734000-memory.dmp
memory/5368-2-0x00007FFCECD90000-0x00007FFCED734000-memory.dmp
memory/5368-10-0x00007FFCECD90000-0x00007FFCED734000-memory.dmp
memory/5368-0-0x00007FFCECF1F000-0x00007FFCECF20000-memory.dmp
memory/5368-1-0x0000014811A90000-0x0000014812556000-memory.dmp
memory/5368-14-0x00007FFCECD90000-0x00007FFCED734000-memory.dmp
memory/5368-12-0x00007FFCECD90000-0x00007FFCED734000-memory.dmp
memory/5368-15-0x00007FFCECD90000-0x00007FFCED734000-memory.dmp
memory/5368-16-0x00007FFCECD90000-0x00007FFCED734000-memory.dmp
memory/5368-17-0x0000014832C20000-0x0000014832CD2000-memory.dmp
memory/5368-18-0x00007FFCECD90000-0x00007FFCED734000-memory.dmp
memory/5368-19-0x0000014832EA0000-0x000001483313E000-memory.dmp
memory/5368-20-0x00007FFCECD90000-0x00007FFCED734000-memory.dmp