Analysis
- max time kernel
148s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
05/09/2026, 13:20
General
- Target 2026-09-04_3ed4bb8def42bc66a8cdadab6bb749cf_glassworm_icedid_luca-stealer_njrat_stealc.exe
- Size 9.7MB
- Sample260905-qlacescr5z
- SHA256 bd0927639d6cdcbbfced059e68beabda2670b40ee4eb103af1dc9a7409482d3b
Malware Config
Signatures
- Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_3ed4bb8def42bc66a8cdadab6bb749cf_glassworm_icedid_luca-stealer_njrat_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-04_3ed4bb8def42bc66a8cdadab6bb749cf_glassworm_icedid_luca-stealer_njrat_stealc.exe"1⤵
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_3ed4bb8def42bc66a8cdadab6bb749cf_glassworm_icedid_luca-stealer_njrat_stealc.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_3ed4bb8def42bc66a8cdadab6bb749cf_glassworm_icedid_luca-stealer_njrat_stealc.exe1⤵
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4564-0-0x0000028F2F200000-0x0000028F2F24F000-memory.dmp
memory/4564-12-0x0000028F2F280000-0x0000028F2F2D7000-memory.dmp
memory/4564-31-0x00007FFC151B0000-0x00007FFC153A5000-memory.dmp
memory/4564-55-0x00007FFC151B0000-0x00007FFC153A5000-memory.dmp
memory/4564-56-0x0000028F31240000-0x0000028F3147B000-memory.dmp
memory/4564-60-0x0000028F31910000-0x0000028F31C72000-memory.dmp
memory/4564-71-0x0000028F31910000-0x0000028F31C72000-memory.dmp
memory/4564-70-0x0000028F31910000-0x0000028F31C72000-memory.dmp
memory/4564-69-0x0000028F31910000-0x0000028F31C72000-memory.dmp
memory/4564-68-0x0000028F31910000-0x0000028F31C72000-memory.dmp
memory/4564-67-0x00007FFC151B0000-0x00007FFC153A5000-memory.dmp
memory/4564-59-0x0000028F31240000-0x0000028F3147B000-memory.dmp
memory/4564-58-0x0000028F31240000-0x0000028F3147B000-memory.dmp
memory/4564-57-0x0000028F31240000-0x0000028F3147B000-memory.dmp
memory/4564-48-0x0000028F31240000-0x0000028F3147B000-memory.dmp
memory/4564-47-0x0000028F30CE0000-0x0000028F30D74000-memory.dmp
memory/4564-46-0x0000028F30CE0000-0x0000028F30D74000-memory.dmp
memory/4564-45-0x0000028F30CE0000-0x0000028F30D74000-memory.dmp
memory/4564-44-0x0000028F30CE0000-0x0000028F30D74000-memory.dmp
memory/4564-43-0x00007FFC151B0000-0x00007FFC153A5000-memory.dmp
memory/4564-36-0x0000028F30CE0000-0x0000028F30D74000-memory.dmp
memory/4564-35-0x0000028F30DF0000-0x0000028F30FF7000-memory.dmp
memory/4564-34-0x0000028F30DF0000-0x0000028F30FF7000-memory.dmp
memory/4564-33-0x0000028F30DF0000-0x0000028F30FF7000-memory.dmp
memory/4564-32-0x0000028F30DF0000-0x0000028F30FF7000-memory.dmp
memory/4564-24-0x0000028F30DF0000-0x0000028F30FF7000-memory.dmp
memory/4564-23-0x0000028F2F280000-0x0000028F2F2D7000-memory.dmp
memory/4564-22-0x0000028F2F280000-0x0000028F2F2D7000-memory.dmp
memory/4564-21-0x0000028F2F280000-0x0000028F2F2D7000-memory.dmp
memory/4564-19-0x00007FFC151B0000-0x00007FFC153A5000-memory.dmp
memory/4564-11-0x0000028F2F200000-0x0000028F2F24F000-memory.dmp
memory/4564-10-0x0000028F2F200000-0x0000028F2F24F000-memory.dmp
memory/4564-9-0x0000028F2F200000-0x0000028F2F24F000-memory.dmp
memory/4564-8-0x0000028F2F200000-0x0000028F2F24F000-memory.dmp
memory/4564-7-0x00007FFC151B0000-0x00007FFC153A5000-memory.dmp
memory/4564-20-0x0000028F2F280000-0x0000028F2F2D7000-memory.dmp