Analysis
- max time kernel
149s - max time network
155s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
04/08/2026, 12:18
General
- Target 2026-08-03_403d1ed5b33f29bfa0cdf2218781f7ed_cobalt-strike_glassworm_icedid_krakenkeylogger_luca-stea.exe
- Size 147.1MB
- Sample260804-pgmaraem3s
- SHA256 a516d7bc95ae4a5cf54350273a76ff5a9497a19baa11770d6a92a59719c0bed4
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_403d1ed5b33f29bfa0cdf2218781f7ed_cobalt-strike_glassworm_icedid_krakenkeylogger_luca-stea.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-03_403d1ed5b33f29bfa0cdf2218781f7ed_cobalt-strike_glassworm_icedid_krakenkeylogger_luca-stea.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
D3DCompiler_47_cor3.dll
PresentationNative_cor3.dll
wpfgfx_cor3.dll
memory/2444-89-0x000001EEEFA70000-0x000001EEEFB25000-memory.dmp
memory/2444-20-0x000001EEEEDA0000-0x000001EEEEDDE000-memory.dmp
memory/2444-33-0x000001EECCED0000-0x000001EECCED5000-memory.dmp
memory/2444-41-0x000001EEEEE80000-0x000001EEEEE99000-memory.dmp
memory/2444-8-0x000001EEEFD00000-0x000001EEF0C87000-memory.dmp
memory/2444-68-0x000001EEEF410000-0x000001EEEF43A000-memory.dmp
memory/2444-71-0x000001EEF3710000-0x000001EEF3F2C000-memory.dmp
memory/2444-77-0x000001EEEEEC0000-0x000001EEEEECA000-memory.dmp
memory/2444-92-0x000001EEEF440000-0x000001EEEF453000-memory.dmp
memory/2444-101-0x000001EEEF9A0000-0x000001EEEF9EA000-memory.dmp
memory/2444-14-0x000001EEEF1C0000-0x000001EEEF31E000-memory.dmp
memory/2444-109-0x000001EEF2EF0000-0x000001EEF2F5F000-memory.dmp
memory/2444-11-0x000001EEEEF90000-0x000001EEEF1B8000-memory.dmp
memory/2444-98-0x000001EEEF7F0000-0x000001EEEF806000-memory.dmp
memory/2444-95-0x000001EEEF9F0000-0x000001EEEFA2C000-memory.dmp
memory/2444-6-0x0000000180000000-0x0000000180A25000-memory.dmp
memory/2444-115-0x000001EEF3690000-0x000001EEF369D000-memory.dmp
memory/2444-86-0x000001EEEF7C0000-0x000001EEEF7E1000-memory.dmp
memory/2444-44-0x000001EEEEEA0000-0x000001EEEEEB6000-memory.dmp
memory/2444-83-0x000001EEEF390000-0x000001EEEF395000-memory.dmp
memory/2444-80-0x000001EEEF820000-0x000001EEEF8A2000-memory.dmp
memory/2444-74-0x000001EEEF560000-0x000001EEEF589000-memory.dmp
memory/2444-65-0x000001EEEF3C0000-0x000001EEEF407000-memory.dmp
memory/2444-62-0x000001EEEEE70000-0x000001EEEEE78000-memory.dmp
memory/2444-59-0x000001EEEF460000-0x000001EEEF554000-memory.dmp
memory/2444-53-0x000001EEEF340000-0x000001EEEF352000-memory.dmp
memory/2444-50-0x000001EEEF320000-0x000001EEEF338000-memory.dmp
memory/2444-47-0x000001EEEEF50000-0x000001EEEEF90000-memory.dmp
memory/2444-112-0x000001EEF3680000-0x000001EEF3686000-memory.dmp
memory/2444-38-0x000001EEEED70000-0x000001EEEED77000-memory.dmp
memory/2444-35-0x000001EEEED80000-0x000001EEEED93000-memory.dmp
memory/2444-29-0x000001EECCEA0000-0x000001EECCEAD000-memory.dmp
memory/2444-26-0x000001EEEEED0000-0x000001EEEEF46000-memory.dmp
memory/2444-23-0x000001EEF0C90000-0x000001EEF14D2000-memory.dmp
memory/2444-17-0x000001EEEEE00000-0x000001EEEEE45000-memory.dmp
memory/2444-118-0x000001EEF4290000-0x000001EEF42E5000-memory.dmp