Analysis

  • max time kernel
    149s
  • max time network
    136s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    13/08/2026, 22:22

General

  • Target
    2026-08-13_ade75c231a9774c8c7055b85eef54627_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
  • Size 10.6MB
  • Sample260813-197ypsgp21
  • SHA256 fff06842bceac3e9695a1e99014a978cf91dd99bb4dbb4c8cb7af06078166b4f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 13 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-13_ade75c231a9774c8c7055b85eef54627_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-13_ade75c231a9774c8c7055b85eef54627_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3856
    • C:\Users\Admin\AppData\Local\Temp\2026-08-13_ade75c231a9774c8c7055b85eef54627_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-08-13_ade75c231a9774c8c7055b85eef54627_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"
      2⤵
      • Loads dropped DLL
      PID:2500

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\VCRUNTIME140.dll
        • Size 93KB
        • SHA256 92d50f7c4055718812cd3d823aa2821d6718eb55d2ab2bac55c2e47260c25a76
        • MD5 SHA1 SHA512 SSDEEP TLSH

        VCRUNTIME140_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\VCRUNTIME140_1.dll
        • Size 35KB
        • SHA256 922124ba0821aa864a0261ed88bd25f8e40f94c24d00d389e23cd9ab2bfc6ba4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\_bz2.pyd
        • Size 84KB
        • SHA256 fd230c44ced7358a549dfeabd5b7acd0cab94c66cd9b55778c94e3f6ed540854
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ctypes.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\_ctypes.pyd
        • Size 124KB
        • SHA256 64725476a8f97309215b04d38071941bf8ceaf0534fcca081cbf8e1da31f3b53
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _decimal.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\_decimal.pyd
        • Size 265KB
        • SHA256 a5e4ef9661f3b5c832d034e922139e95ab8d186940afc2fb7aea1aa95cc6ed12
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _hashlib.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\_hashlib.pyd
        • Size 64KB
        • SHA256 9d79786650e7a7eaf028d2b79481fc5675afa6309eee4f7857553818e35dd54b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _lzma.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\_lzma.pyd
        • Size 159KB
        • SHA256 f7ce997cf23a8e6e79f342aec5c9c7a8f45d9280941bf2986723bc220ed3e094
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _socket.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\_socket.pyd
        • Size 78KB
        • SHA256 2561a4f41702d23045c19827925c59d42acc2e167bc9ae53f0eac3ed2d18e4e5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _sqlite3.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\_sqlite3.pyd
        • Size 87KB
        • SHA256 b4fb0365574857039aff178db2f79641046d630adf916790e039f366e119b97f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-core-console-l1-1-0.dll
        • Size 13KB
        • SHA256 0099f17128d1551a47cbd39ce702d4acc4b49be1bb1cfe974fe5a42da01d88eb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-core-datetime-l1-1-0.dll
        • Size 12KB
        • SHA256 ac227773908836d54c8fc06c4b115f3bdfc82e4d63c7f84e1f8e6e70cd066339
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-core-debug-l1-1-0.dll
        • Size 12KB
        • SHA256 c734022b165b3ba6f8e28670c4190a65c66ec7ecc961811a6bdcd9c7745cac20
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 12KB
        • SHA256 863a07d702717cf818a842af0b4e1dfd6e723f712e49bf8c3af3589434a0ae80
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-core-file-l1-1-0.dll
        • Size 16KB
        • SHA256 d26d433f86223b10ccc55837c3e587fa374cd81efc24b6959435a6770addbf24
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-core-file-l1-2-0.dll
        • Size 12KB
        • SHA256 476fbad616e20312efc943927ade1a830438a6bebb1dd1f83d2370e5343ea7af
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-core-file-l2-1-0.dll
        • Size 12KB
        • SHA256 c78eab8e057bddd55f998e72d8fdf5b53d9e9c8f67c8b404258e198eb2cdcf24
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-core-handle-l1-1-0.dll
        • Size 12KB
        • SHA256 154ef0bf9b9b9daa08101e090aa9716f0fa25464c4ef5f49bc642619c7c16f0e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-core-heap-l1-1-0.dll
        • Size 13KB
        • SHA256 1c1b88d403e2cde510741a840afa445603f76e542391547e6e4cc48958c02076
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 12KB
        • SHA256 159ecb50f14e3c247faec480a3e6e0cf498ec13039c988f962280187cee1391d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 13KB
        • SHA256 820e3acd26ad7a6177e732019492b33342bc9200fc3c0af812ebd41fb4f376cb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-core-localization-l1-2-0.dll
        • Size 15KB
        • SHA256 db970725b36cc78ef2e756ff4b42db7b5b771bfd9d106486322cf037115bd911
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-core-memory-l1-1-0.dll
        • Size 13KB
        • SHA256 aeec3d48068137870e6e40bad9c9f38377aa06c6ea1ac288e9e02af9e8c28e6b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 12KB
        • SHA256 1846947c10b57876239d8cb74923902454f50b347385277f5313d2a6a4e05a96
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 13KB
        • SHA256 990dc7898fd7b442d50bc88fec624290d69f96030a1256385391b05658952508
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 14KB
        • SHA256 a958fd20c06c90112e9e720047d84531b2bd0c77174660dc7e1f093a2ed3cc68
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 13KB
        • SHA256 ca06ccf12927ca52d8827b3a36b23b6389c4c6d4706345e2d70b895b79ff2ec8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-core-profile-l1-1-0.dll
        • Size 12KB
        • SHA256 752542f72af04b3837939f0113bfcb99858e86698998398b6cd0e4e5c3182fd5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 13KB
        • SHA256 d2c9ee6b1698dfe99465af4b7358a2f4c199c907a6001110edbea2d71b63cd3f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-core-string-l1-1-0.dll
        • Size 12KB
        • SHA256 30dc0deb0faf0434732f2158ad24f2199def8dd04520b9daabbc5f0b3b6ddf40
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-core-synch-l1-1-0.dll
        • Size 14KB
        • SHA256 91e50f94a951aa4e48a9059ad222bbe132b02e83d4a7df94a35ea73248e84800
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-core-synch-l1-2-0.dll
        • Size 13KB
        • SHA256 219cc445c1ad44f109219a3bb6900ab965cb6357504fc8110433b14f6a9b57be
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 13KB
        • SHA256 4bcd366eaf0bde99b472fa2bf4e0dda1d860b3f404019fb41bbb8ad3a6d4d8f2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-core-timezone-l1-1-0.dll
        • Size 13KB
        • SHA256 64b5b95fe56b6df4c2d47d771bec32bd89267605df736e08c1249b802d6d48d1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-core-util-l1-1-0.dll
        • Size 12KB
        • SHA256 52226dc5f1e8cd6a22c6a30406ed478e020ac8e3871a1a0c097eb56c97467870
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-crt-conio-l1-1-0.dll
        • Size 13KB
        • SHA256 07fda71f93c21a43d836d87fee199ac2572801993f00d6628dba9b52fcb25535
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-crt-convert-l1-1-0.dll
        • Size 16KB
        • SHA256 252b14d09b0ea162166c50e41aea9c6f6ad8038b36701981e48edff615d3ed4b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-crt-environment-l1-1-0.dll
        • Size 13KB
        • SHA256 10eb78864ebff85efc91cc91804f03fcd1b44d3a149877a9fa66261286348882
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 14KB
        • SHA256 a5b66647ee6794b7ee79f7a2a4a69dec304daea45a11f09100a1ab092495b14b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-crt-heap-l1-1-0.dll
        • Size 13KB
        • SHA256 2eafce6ff69a237b17ae004f1c14241c3144be9eaeb4302fdc10dd1cb07b7673
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-crt-locale-l1-1-0.dll
        • Size 13KB
        • SHA256 80c291e9fcee694f03d105ba903799c79a546f2b5389ecd6349539c323c883aa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-crt-math-l1-1-0.dll
        • Size 21KB
        • SHA256 80c09eb650cf3a913c093e46c7b382e2d7486fe43372c4bc00c991d2c8f07a05
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-multibyte-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-crt-multibyte-l1-1-0.dll
        • Size 20KB
        • SHA256 0bd96e91a0aa1e1a967f08d778026e7ea922feb898757f19a58db59eae6d312b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-crt-process-l1-1-0.dll
        • Size 13KB
        • SHA256 bd475e0c63ae3f59ea747632ab3d3a17dd66f957379fa1d67fa279718e9cd0f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 17KB
        • SHA256 301c5418d2aee12b6b7c53dd9332926ce204a8351b69a84f8e7b8a1344fa7ea1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 18KB
        • SHA256 799e9174163f5878bea68ca9a6d05c0edf375518e7cc6cc69300c2335f3b5ea2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-crt-string-l1-1-0.dll
        • Size 18KB
        • SHA256 3bf407f8386989aa5f8c82525c400b249e6f8d946a32f28c469c996569d5b2e3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-crt-time-l1-1-0.dll
        • Size 15KB
        • SHA256 2f6b0f89f4d680a9a9994d08aa5cd514794be584a379487906071756ac644bd6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\api-ms-win-crt-utility-l1-1-0.dll
        • Size 13KB
        • SHA256 dfad88b5d54c597d81250b8569f6d381f7016f935742ac2138ba2a9ae514c601
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\base_library.zip
        • Size 826KB
        • SHA256 a45521076631461b8c9ef152f3518b9f9b52880e3103eadddf69999b1084fca9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypto-1_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\libcrypto-1_1.dll
        • Size 3.2MB
        • SHA256 296426e7ce11bc3d1cfa9f2aeb42f60c974da4af3b3efbeb0ba40e92e5299fdf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libffi-7.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\libffi-7.dll
        • Size 32KB
        • SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python39.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\python39.dll
        • Size 4.3MB
        • SHA256 d44753fe884b228da36acb17c879b500aeb0225a38fb7ca142fb046c60b22204
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pywintypes39.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\pywin32_system32\pywintypes39.dll
        • Size 131KB
        • SHA256 20bde8e50e42f7aabf59106eea238fcc0dece0c6e362c0a7feeb004ab981db8a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        select.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\select.pyd
        • Size 28KB
        • SHA256 e357e363a0b381183bf298aadf8708eaaf4e15b8ce538e5dd35d243951e07a87
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sqlite3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\sqlite3.dll
        • Size 1.5MB
        • SHA256 cc7f45deee737ddbb45280afac1ae6503b59afc66673f975593e9fc79291342c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ucrtbase.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\ucrtbase.dll
        • Size 994KB
        • SHA256 36cc22d92a60e57dee394f56a9d1ed1655ee9db89d2244a959005116a4184d80
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unicodedata.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38562\unicodedata.pyd
        • Size 1.1MB
        • SHA256 16cd3b343d9ae9364aa6174f3b77199dd54d60f87a1cb4d99cd0ddbbdb3cfb38
        • MD5 SHA1 SHA512 SSDEEP TLSH