Overview

overview

10

Static

static

10

2026-07-27...at.exe

windows10-2004-x64

6

2026-07-27...at.exe

windows11-ltsc_2024-x64

6

Analysis

  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    27/07/2026, 03:50

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-27_09dd1ff525fb8d23b7b99169b29a773b_glassworm_icedid_luca-stealer_njrat.exe
  • Size 2.7MB
  • Sample260727-eefp3svxet
  • SHA256 fe3518e01aa4fb0b5c05c6e7ea53e2e6b59caf3aea388458cdb29a5c8401a910
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Looks up external IP address via web service 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of WriteProcessMemory 12 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-27_09dd1ff525fb8d23b7b99169b29a773b_glassworm_icedid_luca-stealer_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-27_09dd1ff525fb8d23b7b99169b29a773b_glassworm_icedid_luca-stealer_njrat.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2340
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      2⤵
        PID:5612
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe"
        2⤵
          PID:6992
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe"
          2⤵
            PID:6268
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
            2⤵
              PID:4408
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe"
              2⤵
                PID:6416
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe"
                2⤵
                  PID:1576
              • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                1⤵
                  PID:5792
                • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                  "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                  1⤵
                    PID:6676
                  • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                    "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                    1⤵
                      PID:3508
                    • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                      "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                      1⤵
                        PID:4160
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                        1⤵
                          PID:4904
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                          1⤵
                            PID:5916

                          Network

                                MITRE ATT&CK Matrix

                                Replay Monitor

                                Loading Replay Monitor...

                                Downloads

                                veh_log.txt
                                • Path C:\Users\Public\veh_log.txt
                                • Size 174B
                                • SHA256 5e84048712e5676756c23ba35d36a0ec35dea112eb86aa7595ba2e27aa77d78f
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                veh_log.txt
                                • Path C:\Users\Public\veh_log.txt
                                • Size 580B
                                • SHA256 829bf7a6bdc7d2a8e192811330eb6c1975e78a498c1dd69ce6476410c142b673
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                veh_log.txt
                                • Path C:\Users\Public\veh_log.txt
                                • Size 290B
                                • SHA256 9ce0c56b66471e99ac6a89cf48beb1ff2225739baa1e09889f9bce448ce66c09
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                veh_log.txt
                                • Path C:\Users\Public\veh_log.txt
                                • Size 348B
                                • SHA256 8e832442b9838ddefb6e36e13c201b03ddc3c2136737d5cf43decf8ab32d7708
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                veh_log.txt
                                • Path C:\Users\Public\veh_log.txt
                                • Size 464B
                                • SHA256 99bc1539788449549b10c43a3b774d5efa4253159f7dccc3d2b68dfbaf67e15f
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download