Analysis
- max time kernel
149s - max time network
132s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/08/2026, 00:47
General
- Target 2026-08-10_bfa9372b4a92a972665e806e78b628d2_glassworm_icedid_luca-stealer_njrat_stealc.exe
- Size 2.2MB
- Sample260810-a5dk7agk6w
- SHA256 fe79fe0c1c2ae83c87ccc1791943bc3082a362d88d112dc4cfaff233f249ba30
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-10_bfa9372b4a92a972665e806e78b628d2_glassworm_icedid_luca-stealer_njrat_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-10_bfa9372b4a92a972665e806e78b628d2_glassworm_icedid_luca-stealer_njrat_stealc.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\client_dropper.exe"C:\Users\Admin\AppData\Local\Temp\client_dropper.exe"2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
client_dropper.exe
memory/3888-9-0x0000000140000000-0x000000014001E000-memory.dmp
memory/3888-8-0x0000000140000000-0x000000014001E000-memory.dmp
memory/3888-7-0x0000000140000000-0x000000014001E000-memory.dmp
memory/3888-0-0x0000000140000000-0x000000014001E000-memory.dmp
memory/3888-10-0x0000000140000000-0x000000014001E000-memory.dmp
memory/3888-13-0x0000000140000000-0x000000014001E000-memory.dmp
memory/5244-17-0x0000019B8D140000-0x0000019B8D328000-memory.dmp
memory/5244-16-0x00007FFA8F49F000-0x00007FFA8F4A0000-memory.dmp
memory/5244-18-0x00007FFA8F310000-0x00007FFA8FCB4000-memory.dmp
memory/5244-19-0x00007FFA8F310000-0x00007FFA8FCB4000-memory.dmp
memory/5244-20-0x00007FFA8F310000-0x00007FFA8FCB4000-memory.dmp
memory/5244-21-0x00007FFA8F310000-0x00007FFA8FCB4000-memory.dmp
memory/5244-22-0x00007FFA8F310000-0x00007FFA8FCB4000-memory.dmp
memory/5244-23-0x00007FFA8F310000-0x00007FFA8FCB4000-memory.dmp
memory/5244-24-0x00007FFA8F310000-0x00007FFA8FCB4000-memory.dmp
memory/5244-25-0x00007FFA8F310000-0x00007FFA8FCB4000-memory.dmp
memory/5244-26-0x00007FFA8F310000-0x00007FFA8FCB4000-memory.dmp