Overview

overview

8

Static

static

3

2026-08-10...ar.exe

windows10-2004-x64

1

2026-08-10...ar.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    10/08/2026, 01:58

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-10_c23c75bfa6babf61cc8b53b9665857b7_cobalt-strike_glassworm_icedid_luca-stealer_njrat_poet-rat_vidar.exe
  • Size 1.5MB
  • Sample260810-cd4peayglc
  • SHA256 9f5910ddc7603b6ad7188856a6cd8ec1fa9dd2a9358eedc35aa4f20a45ace5b0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-10_c23c75bfa6babf61cc8b53b9665857b7_cobalt-strike_glassworm_icedid_luca-stealer_njrat_poet-rat_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-10_c23c75bfa6babf61cc8b53b9665857b7_cobalt-strike_glassworm_icedid_luca-stealer_njrat_poet-rat_vidar.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:3196

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        hunter.png
        • Path C:\Users\Admin\AppData\Local\Temp\LoadoutsManager\hunter.png
        • Size 48KB
        • SHA256 b70347e16c9a07fdee8a1d1be6508e1b6dd759a28ea3378f55f6618e679fdb4c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        titan.png
        • Path C:\Users\Admin\AppData\Local\Temp\LoadoutsManager\titan.png
        • Size 49KB
        • SHA256 8656bfb594df7b8c53ef260d9f58a04fe5cb08d85ba71fdb6fc52103e1871abc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        warlock.png
        • Path C:\Users\Admin\AppData\Local\Temp\LoadoutsManager\warlock.png
        • Size 49KB
        • SHA256 e196ff5be4ce08a432e685fccb5a9c78e3d17a0a29f180926c8b7f982d4d2fac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        settings.ini
        • Path C:\Users\Admin\AppData\Local\Temp\loadouts_d2\settings.ini
        • Size 2KB
        • SHA256 4a59d3654f50470885c9483e2fcc9e181de22c5037166f7c31cc309e5817668d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        settings.ini
        • Path C:\Users\Admin\AppData\Local\Temp\loadouts_d2\settings.ini
        • Size 3KB
        • SHA256 6de037aa139078e52f5fd6729c3ea49ecda3d1c68cb30a8f6181c77137193eca
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        settings.ini
        • Path C:\Users\Admin\AppData\Local\Temp\loadouts_d2\settings.ini
        • Size 1KB
        • SHA256 6018d8391ec6f48befdb0f92b3de7e6c379a9d38eaf0216c851fa3551f8e9ae5
        • MD5 SHA1 SHA512 TLSH
        Submit Download