Analysis
- max time kernel
153s - max time network
157s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
04/08/2026, 12:54
General
- Target 2026-08-03_1a9d0481ffff2bdc8e3fa25bdb684c5d_cobalt-strike_glassworm_icedid_krakenkeylogger_luca-stea.exe
- Size 147.1MB
- Sample260804-p5ldcsfj5v
- SHA256 ba87ae0bae38a5e557794b7d327b3bb2a4a4c34fb0c0fdeebad60aece6cfe2c6
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_1a9d0481ffff2bdc8e3fa25bdb684c5d_cobalt-strike_glassworm_icedid_krakenkeylogger_luca-stea.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-03_1a9d0481ffff2bdc8e3fa25bdb684c5d_cobalt-strike_glassworm_icedid_krakenkeylogger_luca-stea.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
D3DCompiler_47_cor3.dll
PresentationNative_cor3.dll
wpfgfx_cor3.dll
memory/4944-92-0x000001C6BCFA0000-0x000001C6BCFB3000-memory.dmp
memory/4944-29-0x000001C69C130000-0x000001C69C13D000-memory.dmp
memory/4944-23-0x000001C6BE880000-0x000001C6BF0C2000-memory.dmp
memory/4944-53-0x000001C6BC980000-0x000001C6BC992000-memory.dmp
memory/4944-50-0x000001C69C140000-0x000001C69C158000-memory.dmp
memory/4944-77-0x000001C6BCAA0000-0x000001C6BCAAA000-memory.dmp
memory/4944-71-0x000001C6C16B0000-0x000001C6C1ECC000-memory.dmp
memory/4944-80-0x000001C6BD340000-0x000001C6BD3C2000-memory.dmp
memory/4944-101-0x000001C6BD420000-0x000001C6BD46A000-memory.dmp
memory/4944-90-0x000001C6BD490000-0x000001C6BD545000-memory.dmp
memory/4944-8-0x000001C6BD8F0000-0x000001C6BE877000-memory.dmp
memory/4944-109-0x000001C6BD5C0000-0x000001C6BD62F000-memory.dmp
memory/4944-14-0x000001C6BCDD0000-0x000001C6BCF2E000-memory.dmp
memory/4944-98-0x000001C6BCFC0000-0x000001C6BCFD6000-memory.dmp
memory/4944-95-0x000001C6BD000000-0x000001C6BD03C000-memory.dmp
memory/4944-6-0x0000000180000000-0x0000000180A25000-memory.dmp
memory/4944-83-0x000001C6BCF30000-0x000001C6BCF35000-memory.dmp
memory/4944-86-0x000001C6BCF70000-0x000001C6BCF91000-memory.dmp
memory/4944-35-0x000001C69C220000-0x000001C69C233000-memory.dmp
memory/4944-65-0x000001C6BCAE0000-0x000001C6BCB27000-memory.dmp
memory/4944-62-0x000001C6BCA70000-0x000001C6BCA78000-memory.dmp
memory/4944-61-0x000001C6BD040000-0x000001C6BD134000-memory.dmp
memory/4944-74-0x000001C6BCB60000-0x000001C6BCB89000-memory.dmp
memory/4944-11-0x000001C6BCBA0000-0x000001C6BCDC8000-memory.dmp
memory/4944-47-0x000001C6BC9B0000-0x000001C6BC9F0000-memory.dmp
memory/4944-44-0x000001C69C260000-0x000001C69C276000-memory.dmp
memory/4944-41-0x000001C69C240000-0x000001C69C259000-memory.dmp
memory/4944-38-0x000001C69C160000-0x000001C69C167000-memory.dmp
memory/4944-68-0x000001C6BCB30000-0x000001C6BCB5A000-memory.dmp
memory/4944-32-0x000001C69C120000-0x000001C69C125000-memory.dmp
memory/4944-27-0x000001C6BC9F0000-0x000001C6BCA66000-memory.dmp
memory/4944-17-0x000001C69C1D0000-0x000001C69C215000-memory.dmp
memory/4944-20-0x000001C69C180000-0x000001C69C1BE000-memory.dmp
memory/4944-112-0x000001C6BD8B0000-0x000001C6BD8B6000-memory.dmp
memory/4944-115-0x000001C6BD8A0000-0x000001C6BD8AD000-memory.dmp
memory/4944-118-0x000001C6C6CF0000-0x000001C6C6D45000-memory.dmp