Analysis
- max time kernel
149s - max time network
147s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/08/2026, 02:14
General
- Target 2026-08-10_96bd0e53c0d70163058be415c93c87c3_glassworm_icedid_njrat_remcos_vidar.exe
- Size 3.4MB
- Sample260810-cnzhfayhpc
- SHA256 5a0afc5f2fcfd101c4ddcb45f6ddf4d0c6c292ebe4806ee67eb76bf14a144d49
Malware Config
Signatures
- Family: MetaQuotes
MetaQuotes is a Windows adware family.
- Detects MetaQuotes adware 2 IoCs
- UPX dump on OEP (original entry point) 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-10_96bd0e53c0d70163058be415c93c87c3_glassworm_icedid_njrat_remcos_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-10_96bd0e53c0d70163058be415c93c87c3_glassworm_icedid_njrat_remcos_vidar.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4164-0-0x0000000000550000-0x00000000008B5000-memory.dmp
memory/4164-1-0x0000000000E00000-0x0000000000EC7000-memory.dmp
memory/4164-2-0x0000000001040000-0x00000000013E1000-memory.dmp
memory/4164-4-0x00000000016D0000-0x0000000001846000-memory.dmp
memory/4164-6-0x0000000001880000-0x0000000001956000-memory.dmp
memory/4164-8-0x0000000002060000-0x00000000020BD000-memory.dmp
memory/4164-15-0x0000000002770000-0x000000000277B000-memory.dmp
memory/4164-17-0x00000000029D0000-0x0000000002B9A000-memory.dmp
memory/4164-20-0x0000000002D00000-0x0000000002E16000-memory.dmp
memory/4164-25-0x0000000003180000-0x00000000034FC000-memory.dmp
memory/4164-24-0x00000000030D0000-0x0000000003173000-memory.dmp
memory/4164-23-0x0000000002FA0000-0x00000000030C1000-memory.dmp
memory/4164-21-0x0000000002E20000-0x0000000002F6B000-memory.dmp
memory/4164-19-0x0000000002C50000-0x0000000002CF7000-memory.dmp
memory/4164-18-0x0000000002BA0000-0x0000000002C49000-memory.dmp
memory/4164-29-0x0000000000550000-0x00000000008B5000-memory.dmp
memory/4164-28-0x00000000035E0000-0x000000000360F000-memory.dmp
memory/4164-27-0x0000000003550000-0x0000000003589000-memory.dmp
memory/4164-26-0x0000000003500000-0x0000000003548000-memory.dmp
memory/4164-22-0x0000000002F70000-0x0000000002F97000-memory.dmp
memory/4164-16-0x0000000002780000-0x00000000029C1000-memory.dmp
memory/4164-12-0x00000000024B0000-0x0000000002740000-memory.dmp
memory/4164-11-0x0000000002310000-0x00000000024A9000-memory.dmp
memory/4164-9-0x00000000020C0000-0x0000000002283000-memory.dmp
memory/4164-13-0x0000000002750000-0x0000000002758000-memory.dmp
memory/4164-10-0x0000000002290000-0x0000000002304000-memory.dmp
memory/4164-7-0x0000000001960000-0x0000000002056000-memory.dmp
memory/4164-14-0x0000000002760000-0x000000000276D000-memory.dmp
memory/4164-3-0x0000000001610000-0x00000000016C2000-memory.dmp
memory/4164-5-0x00000000015D0000-0x00000000015FA000-memory.dmp