Analysis
- max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
04/08/2026, 12:54
General
- Target 2026-08-03_1a9d0481ffff2bdc8e3fa25bdb684c5d_cobalt-strike_glassworm_icedid_krakenkeylogger_luca-stea.exe
- Size 147.1MB
- Sample260804-p5ldcsfj5v
- SHA256 ba87ae0bae38a5e557794b7d327b3bb2a4a4c34fb0c0fdeebad60aece6cfe2c6
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_1a9d0481ffff2bdc8e3fa25bdb684c5d_cobalt-strike_glassworm_icedid_krakenkeylogger_luca-stea.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-03_1a9d0481ffff2bdc8e3fa25bdb684c5d_cobalt-strike_glassworm_icedid_krakenkeylogger_luca-stea.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
D3DCompiler_47_cor3.dll
PresentationNative_cor3.dll
wpfgfx_cor3.dll
memory/2424-68-0x0000015BF1770000-0x0000015BF179A000-memory.dmp
memory/2424-17-0x0000015BF0A20000-0x0000015BF0A65000-memory.dmp
memory/2424-20-0x0000015BF1150000-0x0000015BF118E000-memory.dmp
memory/2424-23-0x0000015BF3070000-0x0000015BF38B2000-memory.dmp
memory/2424-26-0x0000015BF1280000-0x0000015BF12F6000-memory.dmp
memory/2424-41-0x0000015BF11B0000-0x0000015BF11C9000-memory.dmp
memory/2424-38-0x0000015BF0A10000-0x0000015BF0A17000-memory.dmp
memory/2424-35-0x0000015BF1190000-0x0000015BF11A3000-memory.dmp
memory/2424-32-0x0000015BF09E0000-0x0000015BF09E5000-memory.dmp
memory/2424-29-0x0000015BEF1F0000-0x0000015BEF1FD000-memory.dmp
memory/2424-44-0x0000015BF11D0000-0x0000015BF11E6000-memory.dmp
memory/2424-53-0x0000015BF1210000-0x0000015BF1222000-memory.dmp
memory/2424-50-0x0000015BF09F0000-0x0000015BF0A08000-memory.dmp
memory/2424-47-0x0000015BF1300000-0x0000015BF1340000-memory.dmp
memory/2424-65-0x0000015BF1720000-0x0000015BF1767000-memory.dmp
memory/2424-5-0x0000000180000000-0x0000000180A25000-memory.dmp
memory/2424-59-0x0000015BF1830000-0x0000015BF1924000-memory.dmp
memory/2424-62-0x0000015BF1250000-0x0000015BF1258000-memory.dmp
memory/2424-8-0x0000015BF20E0000-0x0000015BF3067000-memory.dmp
memory/2424-71-0x0000015BF5B00000-0x0000015BF631C000-memory.dmp
memory/2424-77-0x0000015BF1260000-0x0000015BF126A000-memory.dmp
memory/2424-74-0x0000015BF17A0000-0x0000015BF17C9000-memory.dmp
memory/2424-80-0x0000015BF1BC0000-0x0000015BF1C42000-memory.dmp
memory/2424-83-0x0000015BF17D0000-0x0000015BF17D5000-memory.dmp
memory/2424-92-0x0000015BF1800000-0x0000015BF1813000-memory.dmp
memory/2424-89-0x0000015BF1E00000-0x0000015BF1EB5000-memory.dmp
memory/2424-101-0x0000015BF1D80000-0x0000015BF1DCA000-memory.dmp
memory/2424-11-0x0000015BF1390000-0x0000015BF15B8000-memory.dmp
memory/2424-14-0x0000015BF15C0000-0x0000015BF171E000-memory.dmp
memory/2424-109-0x0000015BF2030000-0x0000015BF209F000-memory.dmp
memory/2424-98-0x0000015BF17E0000-0x0000015BF17F6000-memory.dmp
memory/2424-95-0x0000015BF1D40000-0x0000015BF1D7C000-memory.dmp
memory/2424-86-0x0000015BF1B30000-0x0000015BF1B51000-memory.dmp
memory/2424-115-0x0000015BFAEB0000-0x0000015BFAEBD000-memory.dmp
memory/2424-112-0x0000015BFAEC0000-0x0000015BFAEC6000-memory.dmp
memory/2424-118-0x0000015BF5A90000-0x0000015BF5AE5000-memory.dmp