Overview

overview

7

Static

static

3

2026-07-27...ar.exe

windows10-2004-x64

7

2026-07-27...ar.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    161s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    27/07/2026, 08:05

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-27_ad9d45b450c88ea4dc34f1c14e2e0491_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
  • Size 57.8MB
  • Sample260727-jy7ecsbm8v
  • SHA256 f027e97fa3b14832c94fe81841e4cab361eef1020fa3ae0220e3e2daccff191e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 16 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-27_ad9d45b450c88ea4dc34f1c14e2e0491_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-27_ad9d45b450c88ea4dc34f1c14e2e0491_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4512
    • C:\Users\Admin\AppData\Local\Temp\2026-07-27_ad9d45b450c88ea4dc34f1c14e2e0491_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-07-27_ad9d45b450c88ea4dc34f1c14e2e0491_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"
      2⤵
      • Loads dropped DLL
      PID:488

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45122\VCRUNTIME140.dll
        • Size 116KB
        • SHA256 4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45122\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 a113f192195f245f17389e6ecbed8005990bcb2476ddad33f7c4c6c86327afe5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45122\_ctypes.pyd
        • Size 122KB
        • SHA256 74e0e8384f6c2503215f4cf64c92efe7257f1aec44f72d67ad37dc8ba2530bc1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45122\_socket.pyd
        • Size 81KB
        • SHA256 b102522c23dac2332511eb3502466caf842d6bcd092fbc276b7b55e9cc01b085
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _wmi.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45122\_wmi.pyd
        • Size 36KB
        • SHA256 752fb80edb51f45d3cc1c046f3b007802432b91aef400c985640d6b276a67c12
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45122\base_library.zip
        • Size 1.3MB
        • SHA256 29556cc179d145e9f64d287f0455991bd62a8dc4304e20429f83a1a40959fd09
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        __init__.py
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45122\cv2\__init__.py
        • Size 6KB
        • SHA256 957a91bfd98ffb07a10cd789b7c5c46806568476b61e34c7ad56a00092b981a5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        config-3.py
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45122\cv2\config-3.py
        • Size 748B
        • SHA256 de28c7b5213cca148f09469916584611b3d66c1c8c432880259d6a3a92380213
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        config.py
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45122\cv2\config.py
        • Size 123B
        • SHA256 d9e401b9a67304d69c48a494a485d106b534e02bf5776211c09f09bd671b295d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        __init__.py
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45122\cv2\data\__init__.py
        • Size 73B
        • SHA256 f4ce16721ed7f623a4dcc443ba600d1856db610cb2c3d53c13a8ca028cc68f6d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        __init__.py
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45122\cv2\gapi\__init__.py
        • Size 10KB
        • SHA256 74f5fd2a142a31b0a4707b70c0be3637f0fbf8a940eec4372e7ba87e5a5cedb8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        load_config_py3.py
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45122\cv2\load_config_py3.py
        • Size 271B
        • SHA256 ff583a5874be8f848e73c2f61b3a71680995926479c9bc436e6565c5cce7ca07
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        __init__.py
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45122\cv2\mat_wrapper\__init__.py
        • Size 1KB
        • SHA256 c44707ea1c76f35518ae572b6c1989d76c2ada7e850432e41805dfe112d4e306
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        __init__.py
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45122\cv2\misc\__init__.py
        • Size 38B
        • SHA256 495bd79594cce174673e372c85c4dd8f4ffdf2b3a73fd4623955b0d55de0d462
        • MD5 SHA1 SHA512
        Submit Download

        version.py
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45122\cv2\misc\version.py
        • Size 95B
        • SHA256 c93a418793fcb15b9b4316c0741b8336740e490e94f3b7d1ebe8cd5f6f23815c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        __init__.py
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45122\cv2\typing\__init__.py
        • Size 5KB
        • SHA256 9de1e504724d2ff1cff305e7efdd8d09a8d636734149aa4af9ddf406975119b9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        __init__.py
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45122\cv2\utils\__init__.py
        • Size 344B
        • SHA256 2b16990b35b569af1ca7239dc10f7b24ec62f27a46626b1e2f1271d2e1aa3554
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        version.py
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45122\cv2\version.py
        • Size 97B
        • SHA256 1de383f5662831e69bdddc21f9d1e4a2a8e806f57f7f69669103df64d5db4083
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45122\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libscipy_openblas64_-fb1711452d4d8cee9f276fd1449ee5c7.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45122\numpy.libs\libscipy_openblas64_-fb1711452d4d8cee9f276fd1449ee5c7.dll
        • Size 36.6MB
        • SHA256 39e80d3d5fd1e998cb7c5c7b5d54136af75a688dfa6c38470e8bf89b01eec134
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msvcp140-8021418012832a07a8ca5105a33b1086.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45122\numpy.libs\msvcp140-8021418012832a07a8ca5105a33b1086.dll
        • Size 607KB
        • SHA256 85448e376dfad1859740aedaa2544b565e8a6e4e2e555de6c4638f4ab1b28843
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _multiarray_tests.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45122\numpy\_core\_multiarray_tests.cp312-win_amd64.pyd
        • Size 62KB
        • SHA256 dbb7a1d545feb54ba1b7cd124e20f7d6c8cc328879bd5f72969d0ff3aa8e5056
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _multiarray_umath.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45122\numpy\_core\_multiarray_umath.cp312-win_amd64.pyd
        • Size 3.9MB
        • SHA256 61f1c7ace31fbfbfaae8417d5fab2a459494486cdd69d357cda7e00ecaa07a07
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _umath_linalg.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45122\numpy\linalg\_umath_linalg.cp312-win_amd64.pyd
        • Size 106KB
        • SHA256 ce80fddec4b670d8f11bfd3ff7b793f7f31dfaa2c97131b8e72fe8b0a67f950e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45122\python3.dll
        • Size 66KB
        • SHA256 5146005c36455e7ede4b8ecc0dc6f6fa8ea6b4a99fedbabc1994ae27dfab9d1b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python312.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45122\python312.dll
        • Size 6.6MB
        • SHA256 21700f0bad5769a1b61ea408dc0a140ffd0a356a774c6eb0cc70e574b929d2e2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45122\select.pyd
        • Size 30KB
        • SHA256 411d6f538bdbaf60f1a1798fa8aa7ed3a4e8fcc99c9f9f10d21270d2f3742019
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/488-99-0x00007FFC215F0000-0x00007FFC236CA000-memory.dmp
        Download