Overview

overview

10

Static

static

10

2026-07-28...at.exe

windows10-2004-x64

6

2026-07-28...at.exe

windows11-ltsc_2024-x64

6

Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    29/07/2026, 00:46

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-28_8febe9ee71692179953f178e83f9c8e6_glassworm_icedid_luca-stealer_njrat.exe
  • Size 1.7MB
  • Sample260729-a41dkadn2x
  • SHA256 c5aa67c0bfa2980e2a3754e5a51394248e9ead4adb56b3303cfb5b906df055b5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-28_8febe9ee71692179953f178e83f9c8e6_glassworm_icedid_luca-stealer_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-28_8febe9ee71692179953f178e83f9c8e6_glassworm_icedid_luca-stealer_njrat.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4588
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      2⤵
        PID:1092
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
        2⤵
          PID:1316
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe"
          2⤵
            PID:240
        • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
          "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
          1⤵
            PID:4668
          • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
            "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
            1⤵
              PID:616

            Network

                  MITRE ATT&CK Enterprise v16

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 1KB
                  • SHA256 01f90f1b0b9a9bfc997b0fba2824f6437b2a145c381db194f15db45202560bf0
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 1KB
                  • SHA256 5080cec754a06eb465aa00530026154f67bdb91837784c8c37249a8b2458e8e9
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 1KB
                  • SHA256 dab812a5c94ac02225ee2872eef31d6fbde531adbf51ed22d219c2ac2ddccf82
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 1KB
                  • SHA256 f4ba0b9d817dfa671d4304838a3ecbd7c64b21e1d54d56337154c81d4116e531
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 671B
                  • SHA256 cb09d1b3df66ef7d4e1aecbfa91580b6b3debe1829700784044584427074f01a
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  qwe900.log
                  • Path C:\Users\Admin\AppData\Local\Temp\qwe900.log
                  • Size 745B
                  • SHA256 3dac41be2a8c6e64623343640c41e369181fdade34aa2ff667738047e8999199
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download