Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
30/07/2026, 03:59
General
- Target 2026-07-30_0428a82c6d297903ce5dc083d027b18a_glassworm_hijackloader_icedid_vidar.exe
- Size 29.6MB
- Sample260730-ej7dlacp2t
- SHA256 7c4426a908bbffe2f5ea5b37c2d09389672f768c468c9429b0c157277ea499f0
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-30_0428a82c6d297903ce5dc083d027b18a_glassworm_hijackloader_icedid_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-30_0428a82c6d297903ce5dc083d027b18a_glassworm_hijackloader_icedid_vidar.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/964-0-0x0000027274220000-0x0000027275FBE000-memory.dmp
memory/964-3-0x0000027277BE0000-0x0000027277C74000-memory.dmp
memory/964-2-0x0000027278670000-0x0000027278680000-memory.dmp
memory/964-4-0x0000027278670000-0x0000027278680000-memory.dmp
memory/964-5-0x0000027278670000-0x0000027278680000-memory.dmp
memory/964-6-0x0000027278670000-0x0000027278680000-memory.dmp
memory/964-8-0x0000027278670000-0x0000027278680000-memory.dmp
memory/964-9-0x00000272799F0000-0x0000027279BB2000-memory.dmp
memory/964-10-0x000002727CC70000-0x000002727D198000-memory.dmp
memory/964-11-0x0000027278670000-0x0000027278680000-memory.dmp
memory/964-12-0x0000027278670000-0x0000027278680000-memory.dmp
memory/964-13-0x0000027278670000-0x0000027278680000-memory.dmp
memory/964-14-0x0000027278670000-0x0000027278680000-memory.dmp
memory/964-15-0x0000027278670000-0x0000027278680000-memory.dmp
memory/964-16-0x0000027278670000-0x0000027278680000-memory.dmp
memory/964-17-0x0000027278670000-0x0000027278680000-memory.dmp
memory/964-18-0x000002727DB20000-0x000002727DC20000-memory.dmp
memory/964-19-0x000002727DB20000-0x000002727DC20000-memory.dmp
memory/964-20-0x000002727DB20000-0x000002727DC20000-memory.dmp
memory/964-21-0x000002727DB20000-0x000002727DC20000-memory.dmp