Overview

overview

7

Static

static

3

2026-08-28...lc.exe

windows10-2004-x64

1

2026-08-28...lc.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    142s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    28/08/2026, 22:39

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-28_09bf2ad2fdd876e8c5803be7d729567d_glassworm_icedid_luca-stealer_njrat_stealc.exe
  • Size 9.1MB
  • Sample260828-2kz28stfqa
  • SHA256 3038bafd72c9c7ed5d24bbc54983013009df0401e6f50bd9dec3b89ad46a589d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-28_09bf2ad2fdd876e8c5803be7d729567d_glassworm_icedid_luca-stealer_njrat_stealc.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-28_09bf2ad2fdd876e8c5803be7d729567d_glassworm_icedid_luca-stealer_njrat_stealc.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4076
    • C:\Users\Admin\AppData\Local\Aurora15Connector\Aurora15Connector.exe
      "C:\Users\Admin\AppData\Local\Aurora15Connector\Aurora15Connector.exe" --launcher-update-probe --ready-file C:\Users\Admin\AppData\Local\Aurora15Connector\updates\update-5d6dd8a41706493e877d0f44b0c03cf5\launcher-90e302b8cabd45d1b206d9524433874b.ready --ready-token 69A21F8A12D9836CF8F53C70D6C56F9CE903D2668076B994890FBF281DEE7CB0 --expected-sha256 7BFF88672FFA8864ED18D1958D04DA894C87F628AB5204FA6F92AB2AD0A71A08 --expected-length 10038272
      2⤵
      • Executes dropped EXE
      PID:4364

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Aurora15Connector.9c7430b02665462ab9bc5e19201307fc.new
        • Path C:\Users\Admin\AppData\Local\Aurora15Connector\Aurora15Connector.9c7430b02665462ab9bc5e19201307fc.new
        • Size 9.6MB
        • SHA256 7bff88672ffa8864ed18d1958d04da894c87f628ab5204fa6f92ab2ad0a71a08
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Aurora15Connector.ini
        • Path C:\Users\Admin\AppData\Local\Aurora15Connector\Aurora15Connector.ini
        • Size 316B
        • SHA256 97b81b72a48af808b160377e78a46b631d396d385827f569296cf4d797d61c9f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        launcher.log
        • Path C:\Users\Admin\AppData\Local\Aurora15Connector\logs\launcher.log
        • Size 383B
        • SHA256 8ff4672c99900e0a63b769bc3151ab29ce516bcd100f026079d28a41b99341b8
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        launcher.log
        • Path C:\Users\Admin\AppData\Local\Aurora15Connector\logs\launcher.log
        • Size 480B
        • SHA256 5581b5e7ca7d82f760482632bf9a67374f40d250783cf570f8216f0fc8cbcdcb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        launcher.log
        • Path C:\Users\Admin\AppData\Local\Aurora15Connector\logs\launcher.log
        • Size 1KB
        • SHA256 24844a258fd4354f25af0d8836db6eae6766169d60d28e0d62861a6083f80ea3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        launcher-90e302b8cabd45d1b206d9524433874b.ready
        • Path C:\Users\Admin\AppData\Local\Aurora15Connector\updates\update-5d6dd8a41706493e877d0f44b0c03cf5\launcher-90e302b8cabd45d1b206d9524433874b.ready
        • Size 64B
        • SHA256 9cdc2eb1e8a9c2996945ce96f2d4064279615ba762a91beeb284bc1522f89d51
        • MD5 SHA1 SHA512 TLSH
        Submit Download