Overview

overview

10

Static

static

10

2026-08-20...ar.exe

windows10-2004-x64

1

2026-08-20...ar.exe

windows11-ltsc_2024-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    144s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    20/08/2026, 15:25

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-20_671f62e9eda3fb260ad05ed8d20669c8_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar.exe
  • Size 9.5MB
  • Sample260820-strmsazekh
  • SHA256 8cc7b01a9ba69489fc2d55ce177eac5a3d94e9bbd09dd67f28e18c3ddb6a32e8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-20_671f62e9eda3fb260ad05ed8d20669c8_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-20_671f62e9eda3fb260ad05ed8d20669c8_cobalt-strike_glassworm_icedid_njrat_satacom_stealc_vidar.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1404

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/1404-1-0x0000029C3BF60000-0x0000029C3BF61000-memory.dmp
        Download

        memory/1404-2-0x0000029C3BF70000-0x0000029C3BF71000-memory.dmp
        Download

        memory/1404-0-0x0000029C3BF50000-0x0000029C3BF51000-memory.dmp
        Download