Analysis

  • max time kernel
    167s
  • max time network
    173s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    13/08/2026, 15:01

General

  • Target
    2026-08-13_a7005cd34cfabfa4ee94ad6533d2e257_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
  • Size 15.8MB
  • Sample260813-sd3ecabl3w
  • SHA256 8c7bb7f648e112fb5d80856de47126151f3e99dc61fae269276fa05c84439c49
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10

Malware Config

Signatures

  • Drops file in Program Files directory 1 IoCs
  • Loads dropped DLL 31 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-13_a7005cd34cfabfa4ee94ad6533d2e257_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-13_a7005cd34cfabfa4ee94ad6533d2e257_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2592
    • C:\Users\Admin\AppData\Local\Temp\2026-08-13_a7005cd34cfabfa4ee94ad6533d2e257_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-08-13_a7005cd34cfabfa4ee94ad6533d2e257_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"
      2⤵
      • Drops file in Program Files directory
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      PID:1672

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\VCRUNTIME140.dll
        • Size 116KB
        • SHA256 4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
        • MD5 SHA1 SHA512 SSDEEP TLSH

        VCRUNTIME140_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 a113f192195f245f17389e6ecbed8005990bcb2476ddad33f7c4c6c86327afe5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _asyncio.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\_asyncio.pyd
        • Size 63KB
        • SHA256 746bc8fa88282afe19dc60e426cc0a75bea3bd137cca06a0b57a30bd31459403
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\_bz2.pyd
        • Size 82KB
        • SHA256 00b8ca9a338d2b47285c9e56d6d893db2a999b47216756f18439997fb80a56e3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ctypes.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\_ctypes.pyd
        • Size 121KB
        • SHA256 c148292328f0aab7863af82f54f613961e7cb95b7215f7a81cafaf45bd4c42b7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _decimal.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\_decimal.pyd
        • Size 249KB
        • SHA256 980a63f2b39cf16910f44384398e25f24482346a482addb00de42555b17d4278
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-core-console-l1-1-0.dll
        • Size 21KB
        • SHA256 14aba7b8f5e35690af1e009df3979fbf6a9541eccca7b8cdb078d8b6c708abac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-core-datetime-l1-1-0.dll
        • Size 22KB
        • SHA256 86a720b08857663a2fd61e24d309d75e83589d966a1d586554b72bd98330b2e4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-core-debug-l1-1-0.dll
        • Size 21KB
        • SHA256 be5cd6486fd0d577c2efbd666f70105955a2420d03cb99bc31d6d745075caa66
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 22KB
        • SHA256 4041195442ebeecce5bddc79a76e5587893d2455f62b2760b68d03184e070bf7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-fibers-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-core-fibers-l1-1-0.dll
        • Size 21KB
        • SHA256 5f6d076735d1b76b26354b74897843ab69a534c0d1c081f0b240002a6367fb95
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-core-file-l1-1-0.dll
        • Size 25KB
        • SHA256 6c5a873d3b5c96c77f08462f8501519a2c92484d9df9820ba901566cff1efed6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-core-file-l1-2-0.dll
        • Size 21KB
        • SHA256 a679113045463bf7419c81f5178ff02b4a09a5505813f21d48c147a87941ad7d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-core-file-l2-1-0.dll
        • Size 22KB
        • SHA256 2b5f2d3c9c6a324381b3fa95d270fa034d0738cc351d04e89231c0892c9a2db8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-core-handle-l1-1-0.dll
        • Size 21KB
        • SHA256 584cc80c2a141e7acf4e30a514e7d610f4ee76b68b2c2fe9be892978476fce82
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-core-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 6ac5ce6108ef434a82fcd4ff5317a5177e4a51a926787fbcb3d4dcac9e9db7c6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 22KB
        • SHA256 8d5ac2ad7db848e2547f0f4d0327eec9eb1f49f32d6c74d10fb51db043b3e77f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 22KB
        • SHA256 8c6e8b6548a9de8ddfa61c14bfb84740df76f107711468916305784279156588
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-core-localization-l1-2-0.dll
        • Size 22KB
        • SHA256 1fb1f7f567c30876ea298eecfa5fa8db5bc2b3dd154a60edb4b70f329b978e35
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-core-memory-l1-1-0.dll
        • Size 21KB
        • SHA256 eea8ab41bc4e80051711e051f89bac6e852488d72d7a9ed96aec550e794c3c43
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 22KB
        • SHA256 61792100271d7cd85c883d322cfbea06d253d364755ad15f54be94fd67164188
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 21KB
        • SHA256 108f0ea61d6dc92e8ac591b0a6d1d24ad16e3b3052d2ba2efaeedffde5ed8d10
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 22KB
        • SHA256 1401b6dd33fcabcfa10c810ed610b349ada1ddffea038d95d30653849a5b0be1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 22KB
        • SHA256 4ceb8c2ccfae0e27a5ee8f16211d7be057d886bcba7205625efc3792fed170a7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-core-profile-l1-1-0.dll
        • Size 22KB
        • SHA256 fa7d68ddc1816efa7656695208dea74af68ffec6f06308e781228d11d3879a5f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 21KB
        • SHA256 0c4c05e75a32ce0eaaaf2859f24fa1424afd7efd513107459a42f53328f01123
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-core-string-l1-1-0.dll
        • Size 21KB
        • SHA256 1128f127ee92b1810edebd6c556086481308e89b4da2ee956f237032b9c4a07e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-core-synch-l1-1-0.dll
        • Size 22KB
        • SHA256 d17e946831eb0c70712490053ee84b6538aaf37ef08e42755e65f228e5f3de35
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-core-synch-l1-2-0.dll
        • Size 21KB
        • SHA256 77ff1e667daba2b15c9fa58eb0bbd05b5c4d7504fe66fa21cd83689fcf200dc2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 22KB
        • SHA256 29c50bc0902c8ac7411ca17e2223dafb20e14d1c39af0c3d68e49ecc140f94ce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-core-timezone-l1-1-0.dll
        • Size 21KB
        • SHA256 4bc04daf5c62a39c86c671f4194b0c3a8c286edc3bc8c0893258d38c03d45595
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-core-util-l1-1-0.dll
        • Size 22KB
        • SHA256 303dec00b9d99870c0705a93ff9f296565ea7f6caa159ac68a4c95db00c07496
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-crt-conio-l1-1-0.dll
        • Size 22KB
        • SHA256 590d8382317e13b20693c003479b3fff924f38cbcdf053cfe5bbdfc2fa2eac77
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-crt-convert-l1-1-0.dll
        • Size 26KB
        • SHA256 c9ab49c1cc31e82ef2eb125af39baedd40dd2b3c911fec58ad4107bb56f7ae8b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-crt-environment-l1-1-0.dll
        • Size 21KB
        • SHA256 f80656329ad596eb9f1d4203513cb61896f26fa27fd300328dfc14822cf326c2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 21KB
        • SHA256 9ee8e58aea66b99bcc27112532f3a05b3a72ada4ee88907ddd4d72aa8ebc3633
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-crt-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 5500b87f6df306a64c12d4c0166f4b9a6d79dec289cb45de0cdd3fba67e0f1a4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-crt-locale-l1-1-0.dll
        • Size 22KB
        • SHA256 944c70990a650564a23270defc30ca57c12f8ed0d75e1eeefd07fa6f3d7810b7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-crt-math-l1-1-0.dll
        • Size 29KB
        • SHA256 1fddc3a487209da62a8a26eb9487acd882bfa41c2ba0a3b5cb59119fde44000f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-multibyte-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-crt-multibyte-l1-1-0.dll
        • Size 30KB
        • SHA256 ee7973fc4e3bc86b99ac6c079fb92edfb8b9951697953b1ea43fe4b78a709e76
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-crt-process-l1-1-0.dll
        • Size 21KB
        • SHA256 e93a3c20af0724e4486ee65088a1516276bfce72076a6fa7e8e87d4969cb5451
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 26KB
        • SHA256 ff4b25fa72744564a846f6cf8098d61e88471b4e8407834b6b3725a4ae28a2ae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 25KB
        • SHA256 f4c770d3072952d37bb5ea8ecd8572487039c32bdd518ae4c45e08f5e54a3450
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-crt-string-l1-1-0.dll
        • Size 26KB
        • SHA256 db4758e860ea287b5939530d92e8b009f7ae05f14430eafcb1009356747173c9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-crt-time-l1-1-0.dll
        • Size 22KB
        • SHA256 b894e32b435c191842895f356ef01710bb564ad7fda7053f4cc4416e5a5de74a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\api-ms-win-crt-utility-l1-1-0.dll
        • Size 21KB
        • SHA256 092124ad30da7a70732b6575dd9d8598b5b9b7050a9faa699aa463272dd3bbed
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\base_library.zip
        • Size 1.4MB
        • SHA256 396171544049d4554472e78cb41f873f7d8951d7450685f364d4487d09b98ad8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypto-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 05fe080eab7fc535c51e10c1bd76a2f3e6217f9c91a25034774588881c3f99de
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libffi-8.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libssl-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\libssl-3.dll
        • Size 768KB
        • SHA256 2e9fbcd8f7fdc13a5179533239811456554f2b3aa2fb10e1b17be0df81c79006
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pyexpat.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\pyexpat.pyd
        • Size 194KB
        • SHA256 c7c7564f7f874fb660a46384980a2cf28bc3e245ca83628a197ccf861eab5560
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\python3.dll
        • Size 65KB
        • SHA256 db84bc052cfb121fe4db36242ba5f1d2c031b600ef5d8d752cf25b7c02b6bac6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python311.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\python311.dll
        • Size 5.5MB
        • SHA256 0817a2a657a24c0d5fbb60df56960f42fc66b3039d522ec952dab83e2d869364
        • MD5 SHA1 SHA512 SSDEEP TLSH

        select.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\select.pyd
        • Size 29KB
        • SHA256 bae0974390945520eb99ab32486c6a964691f8f4a028ac408d98fa8fb0db7d90
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sqlite3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\sqlite3.dll
        • Size 1.5MB
        • SHA256 314bba62f4a1628b986afc94c09dc29cdaf08210eae469440fbf46bcdb86d3fd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ucrtbase.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\ucrtbase.dll
        • Size 1.1MB
        • SHA256 6adc61002519e9cfc5f8f09d9d4bbc3e9255cbaca1c8b223c11ef137bb17d26d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unicodedata.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI25922\unicodedata.pyd
        • Size 1.1MB
        • SHA256 37c68617fa02a2cadced17ef724e2d450ef12a8a37215da789a4679fde1c5c02
        • MD5 SHA1 SHA512 SSDEEP TLSH