Analysis
- max time kernel
152s - max time network
136s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
04/08/2026, 12:18
General
- Target 2026-08-03_403d1ed5b33f29bfa0cdf2218781f7ed_cobalt-strike_glassworm_icedid_krakenkeylogger_luca-stea.exe
- Size 147.1MB
- Sample260804-pgmaraem3s
- SHA256 a516d7bc95ae4a5cf54350273a76ff5a9497a19baa11770d6a92a59719c0bed4
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_403d1ed5b33f29bfa0cdf2218781f7ed_cobalt-strike_glassworm_icedid_krakenkeylogger_luca-stea.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-03_403d1ed5b33f29bfa0cdf2218781f7ed_cobalt-strike_glassworm_icedid_krakenkeylogger_luca-stea.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
D3DCompiler_47_cor3.dll
PresentationNative_cor3.dll
wpfgfx_cor3.dll
memory/4124-80-0x0000027C61010000-0x0000027C61092000-memory.dmp
memory/4124-41-0x0000027C3FC70000-0x0000027C3FC89000-memory.dmp
memory/4124-53-0x0000027C60290000-0x0000027C602A2000-memory.dmp
memory/4124-59-0x0000027C60910000-0x0000027C60A04000-memory.dmp
memory/4124-71-0x0000027C64FA0000-0x0000027C657BC000-memory.dmp
memory/4124-83-0x0000027C60400000-0x0000027C60405000-memory.dmp
memory/4124-98-0x0000027C608E0000-0x0000027C608F6000-memory.dmp
memory/4124-101-0x0000027C61140000-0x0000027C6118A000-memory.dmp
memory/4124-95-0x0000027C610A0000-0x0000027C610DC000-memory.dmp
memory/4124-29-0x0000027C3E2A0000-0x0000027C3E2AD000-memory.dmp
memory/4124-14-0x0000027C606B0000-0x0000027C6080E000-memory.dmp
memory/4124-109-0x0000027C648C0000-0x0000027C6492F000-memory.dmp
memory/4124-92-0x0000027C608A0000-0x0000027C608B3000-memory.dmp
memory/4124-90-0x0000027C64780000-0x0000027C64835000-memory.dmp
memory/4124-86-0x0000027C60870000-0x0000027C60891000-memory.dmp
memory/4124-5-0x0000000180000000-0x0000000180A25000-memory.dmp
memory/4124-74-0x0000027C60810000-0x0000027C60839000-memory.dmp
memory/4124-77-0x0000027C603C0000-0x0000027C603CA000-memory.dmp
memory/4124-23-0x0000027C62180000-0x0000027C629C2000-memory.dmp
memory/4124-65-0x0000027C60420000-0x0000027C60467000-memory.dmp
memory/4124-62-0x0000027C602B0000-0x0000027C602B8000-memory.dmp
memory/4124-20-0x0000027C3FC00000-0x0000027C3FC3E000-memory.dmp
memory/4124-50-0x0000027C60270000-0x0000027C60288000-memory.dmp
memory/4124-47-0x0000027C602C0000-0x0000027C60300000-memory.dmp
memory/4124-44-0x0000027C60250000-0x0000027C60266000-memory.dmp
memory/4124-38-0x0000027C3E2C0000-0x0000027C3E2C7000-memory.dmp
memory/4124-35-0x0000027C3E2D0000-0x0000027C3E2E3000-memory.dmp
memory/4124-32-0x0000027C3E280000-0x0000027C3E285000-memory.dmp
memory/4124-68-0x0000027C60300000-0x0000027C6032A000-memory.dmp
memory/4124-26-0x0000027C60340000-0x0000027C603B6000-memory.dmp
memory/4124-8-0x0000027C611F0000-0x0000027C62177000-memory.dmp
memory/4124-17-0x0000027C3FBB0000-0x0000027C3FBF5000-memory.dmp
memory/4124-11-0x0000027C60480000-0x0000027C606A8000-memory.dmp
memory/4124-115-0x0000027C64890000-0x0000027C6489D000-memory.dmp
memory/4124-112-0x0000027C64880000-0x0000027C64886000-memory.dmp
memory/4124-118-0x0000027C6B310000-0x0000027C6B365000-memory.dmp