Analysis

  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    14/08/2026, 09:26

General

  • Target
    2026-08-14_ea2a5ae16120bda1fe07cab5f4940690_glassworm_icedid_njrat_ryuk.exe
  • Size 4.7MB
  • Sample260814-ld9p4azfpc
  • SHA256 6425e502762b5cbb690607313d0e17cc59907b00848ece01625f1ad5e4fab932
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 2 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-14_ea2a5ae16120bda1fe07cab5f4940690_glassworm_icedid_njrat_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-14_ea2a5ae16120bda1fe07cab5f4940690_glassworm_icedid_njrat_ryuk.exe"
    1⤵
    • Drops file in Windows directory
    • Suspicious use of WriteProcessMemory
    PID:2620
    • C:\Users\Admin\AppData\Local\Temp\2026-08-14_ea2a5ae16120bda1fe07cab5f4940690_glassworm_icedid_njrat_ryuk.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-08-14_ea2a5ae16120bda1fe07cab5f4940690_glassworm_icedid_njrat_ryuk.exe" --statistics=https://api.browser.yandex.ru/installstats/send/dtype=stred/pid=457/cid=72992/path=extended_stat/vars=-action=service_unused,-brand_id=unknown,-error=UNKNOWN_COMMAND,-installer_type=service,-launched=false,-old_style=1,-old_ver=,-result=0,-stage=error,-ui=B4C9B915_F7C5_48B1_94D3_D16DDE27D6E6/*
      2⤵
      • Drops file in Windows directory
      PID:1976

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        yandex_browser_service_update.log

        • Path C:\Windows\SystemTemp\yandex_browser_service_update.log
        • Size 2KB
        • SHA256 bdf86b890b91be159207d3dc14298a1121d55d566ca734f89e90ee9cfbe4b533
        • MD5 SHA1 SHA512 TLSH

        yandex_browser_service_update.log

        • Path C:\Windows\SystemTemp\yandex_browser_service_update.log
        • Size 3KB
        • SHA256 f2d71b41cca829f5dcad307744e2709b29d79e2ffdc917010abf48335ae9b77a
        • MD5 SHA1 SHA512 TLSH

        yandex_browser_service_update.log

        • Path C:\Windows\SystemTemp\yandex_browser_service_update.log
        • Size 5KB
        • SHA256 a2f04c4d206220e2cf0290c5af326ccb82a6e2eeea0ecf8e206fb92585c1e568
        • MD5 SHA1 SHA512 SSDEEP TLSH