Analysis
- max time kernel
149s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
05/09/2026, 13:20
General
- Target 2026-09-04_3ed4bb8def42bc66a8cdadab6bb749cf_glassworm_icedid_luca-stealer_njrat_stealc.exe
- Size 9.7MB
- Sample260905-qlacescr5z
- SHA256 bd0927639d6cdcbbfced059e68beabda2670b40ee4eb103af1dc9a7409482d3b
Malware Config
Signatures
- Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_3ed4bb8def42bc66a8cdadab6bb749cf_glassworm_icedid_luca-stealer_njrat_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-04_3ed4bb8def42bc66a8cdadab6bb749cf_glassworm_icedid_luca-stealer_njrat_stealc.exe"1⤵
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_3ed4bb8def42bc66a8cdadab6bb749cf_glassworm_icedid_luca-stealer_njrat_stealc.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_3ed4bb8def42bc66a8cdadab6bb749cf_glassworm_icedid_luca-stealer_njrat_stealc.exe1⤵
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2128-0-0x00000227650D0000-0x000002276511F000-memory.dmp
memory/2128-8-0x00000227650D0000-0x000002276511F000-memory.dmp
memory/2128-11-0x00000227650D0000-0x000002276511F000-memory.dmp
memory/2128-7-0x00007FFC8B120000-0x00007FFC8B383000-memory.dmp
memory/2128-10-0x00000227650D0000-0x000002276511F000-memory.dmp
memory/2128-9-0x00000227650D0000-0x000002276511F000-memory.dmp
memory/2128-20-0x0000022766940000-0x0000022766997000-memory.dmp
memory/2128-23-0x0000022766940000-0x0000022766997000-memory.dmp
memory/2128-19-0x00007FFC8B120000-0x00007FFC8B383000-memory.dmp
memory/2128-34-0x00000227677C0000-0x00000227679C7000-memory.dmp
memory/2128-46-0x00000227675B0000-0x0000022767644000-memory.dmp
memory/2128-43-0x00007FFC8B120000-0x00007FFC8B383000-memory.dmp
memory/2128-48-0x0000022767C10000-0x0000022767E4B000-memory.dmp
memory/2128-35-0x00000227677C0000-0x00000227679C7000-memory.dmp
memory/2128-59-0x0000022767C10000-0x0000022767E4B000-memory.dmp
memory/2128-58-0x0000022767C10000-0x0000022767E4B000-memory.dmp
memory/2128-60-0x00000227681B0000-0x0000022768512000-memory.dmp
memory/2128-71-0x00000227681B0000-0x0000022768512000-memory.dmp
memory/2128-70-0x00000227681B0000-0x0000022768512000-memory.dmp
memory/2128-69-0x00000227681B0000-0x0000022768512000-memory.dmp
memory/2128-68-0x00000227681B0000-0x0000022768512000-memory.dmp
memory/2128-67-0x00007FFC8B120000-0x00007FFC8B383000-memory.dmp
memory/2128-57-0x0000022767C10000-0x0000022767E4B000-memory.dmp
memory/2128-56-0x0000022767C10000-0x0000022767E4B000-memory.dmp
memory/2128-55-0x00007FFC8B120000-0x00007FFC8B383000-memory.dmp
memory/2128-47-0x00000227675B0000-0x0000022767644000-memory.dmp
memory/2128-45-0x00000227675B0000-0x0000022767644000-memory.dmp
memory/2128-44-0x00000227675B0000-0x0000022767644000-memory.dmp
memory/2128-36-0x00000227675B0000-0x0000022767644000-memory.dmp
memory/2128-33-0x00000227677C0000-0x00000227679C7000-memory.dmp
memory/2128-31-0x00007FFC8B120000-0x00007FFC8B383000-memory.dmp
memory/2128-32-0x00000227677C0000-0x00000227679C7000-memory.dmp
memory/2128-24-0x00000227677C0000-0x00000227679C7000-memory.dmp
memory/2128-22-0x0000022766940000-0x0000022766997000-memory.dmp
memory/2128-21-0x0000022766940000-0x0000022766997000-memory.dmp
memory/2128-12-0x0000022766940000-0x0000022766997000-memory.dmp