Overview

overview

3

Static

static

3

2026-08-09...ar.exe

windows10-2004-x64

1

2026-08-09...ar.exe

windows11-ltsc_2024-x64

1

Analysis

  • max time kernel
    148s
  • max time network
    114s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    09/08/2026, 05:21

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-09_729b992f59fc615ae8da0fa113e563be_cobalt-strike_glassworm_icedid_luca-stealer_njrat_poet-rat_vidar.exe
  • Size 1.5MB
  • Sample260809-f2csda1ejf
  • SHA256 f51caa6a886060af056b4a6049d4b3d13444b3d49d782a43416ec0926c18eb50
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-09_729b992f59fc615ae8da0fa113e563be_cobalt-strike_glassworm_icedid_luca-stealer_njrat_poet-rat_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-09_729b992f59fc615ae8da0fa113e563be_cobalt-strike_glassworm_icedid_luca-stealer_njrat_poet-rat_vidar.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:1548

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        hunter.png
        • Path C:\Users\Admin\AppData\Local\Temp\LoadoutsManager\hunter.png
        • Size 48KB
        • SHA256 b70347e16c9a07fdee8a1d1be6508e1b6dd759a28ea3378f55f6618e679fdb4c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        titan.png
        • Path C:\Users\Admin\AppData\Local\Temp\LoadoutsManager\titan.png
        • Size 49KB
        • SHA256 8656bfb594df7b8c53ef260d9f58a04fe5cb08d85ba71fdb6fc52103e1871abc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        warlock.png
        • Path C:\Users\Admin\AppData\Local\Temp\LoadoutsManager\warlock.png
        • Size 49KB
        • SHA256 e196ff5be4ce08a432e685fccb5a9c78e3d17a0a29f180926c8b7f982d4d2fac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        settings.ini
        • Path C:\Users\Admin\AppData\Local\Temp\loadouts_d2\settings.ini
        • Size 1KB
        • SHA256 e46798b28f80cf009a3af885ad5ecc223dd19525e226654eae8156dd0fc8c19c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        settings.ini
        • Path C:\Users\Admin\AppData\Local\Temp\loadouts_d2\settings.ini
        • Size 3KB
        • SHA256 6de037aa139078e52f5fd6729c3ea49ecda3d1c68cb30a8f6181c77137193eca
        • MD5 SHA1 SHA512 TLSH
        Submit Download