Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
09/08/2026, 06:54
General
- Target 2026-08-09_41f7fd313857e76cfbe09a60d9580658_glassworm_icedid.exe
- Size 1.2MB
- Sample260809-hpgxnshc83
- SHA256 679529ba59feccb1d79cb010e9d81eabe7712fe91540f2076b13477e974efbd0
Malware Config
Signatures
- Detects executables referencing virtualization MAC addresses 1 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-09_41f7fd313857e76cfbe09a60d9580658_glassworm_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-09_41f7fd313857e76cfbe09a60d9580658_glassworm_icedid.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2868-0-0x00007FF8C7C6F000-0x00007FF8C7C70000-memory.dmp
memory/2868-1-0x0000000000AD0000-0x0000000000C0E000-memory.dmp
memory/2868-2-0x00007FF8C7AE0000-0x00007FF8C8484000-memory.dmp
memory/2868-3-0x00007FF8C7AE0000-0x00007FF8C8484000-memory.dmp
memory/2868-4-0x00007FF8C7AE0000-0x00007FF8C8484000-memory.dmp
memory/2868-5-0x00007FF8C7AE0000-0x00007FF8C8484000-memory.dmp
memory/2868-6-0x00007FF8C7AE0000-0x00007FF8C8484000-memory.dmp
memory/2868-7-0x00007FF8C7AE0000-0x00007FF8C8484000-memory.dmp
memory/2868-8-0x0000000003B30000-0x0000000003B38000-memory.dmp
memory/2868-10-0x000000001CBE0000-0x000000001CBEE000-memory.dmp
memory/2868-9-0x0000000022F80000-0x0000000022FBE000-memory.dmp
memory/2868-11-0x00007FF8C7AE0000-0x00007FF8C8484000-memory.dmp
memory/2868-12-0x00007FF8C7AE0000-0x00007FF8C8484000-memory.dmp
memory/2868-13-0x00007FF8C7AE0000-0x00007FF8C8484000-memory.dmp
memory/2868-14-0x00007FF8C7AE0000-0x00007FF8C8484000-memory.dmp
memory/2868-15-0x00007FF8C7AE0000-0x00007FF8C8484000-memory.dmp
memory/2868-16-0x00007FF8C7AE0000-0x00007FF8C8484000-memory.dmp