Analysis
- max time kernel
150s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 15:08
General
- Target 2026-09-10_774616bf1d36bcc134257e31cd5f9ffc_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe
- Size 33.8MB
- Sample260910-sh295stvgw
- SHA256 db9ce8f0eed015147b99abe421137da2be91f6496edf937b934c2b4123f0fd4f
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Loads dropped DLL 1 IoCs
- Suspicious behavior: EnumeratesProcesses 38 IoCs
- Suspicious behavior: LoadsDriver 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-10_774616bf1d36bcc134257e31cd5f9ffc_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-10_774616bf1d36bcc134257e31cd5f9ffc_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_stealc_vidar.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Public\8DobIf\GRYemS.exe"C:\Users\Public\8DobIf\GRYemS.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
GRYemS.exe
UxEnhance64.dll
adoresd.dat
msadox.tb
memory/4444-1-0x0000000002050000-0x000000000205E000-memory.dmp
memory/4444-2-0x0000000002060000-0x000000000206C000-memory.dmp
memory/4444-504-0x00007FFFB72B0000-0x00007FFFB72C2000-memory.dmp
memory/4444-524-0x0000000002050000-0x000000000205E000-memory.dmp
memory/4444-525-0x00007FFFB72B0000-0x00007FFFB72C2000-memory.dmp
memory/4444-0-0x0000000002050000-0x000000000205E000-memory.dmp
memory/4808-530-0x00007FFFC1C70000-0x00007FFFC1C72000-memory.dmp
memory/4808-531-0x00007FFFA0EC0000-0x00007FFFA13DE000-memory.dmp
memory/4808-536-0x000001EFCDF70000-0x000001EFCE7F7000-memory.dmp
memory/4808-539-0x000001EFCDF70000-0x000001EFCE7F7000-memory.dmp
memory/4808-538-0x00007FFFC1C80000-0x00007FFFC1C82000-memory.dmp
memory/4808-543-0x000001EFCDF70000-0x000001EFCE7F7000-memory.dmp
memory/4808-544-0x000001EFCDF70000-0x000001EFCE7F7000-memory.dmp
memory/4808-545-0x000001EFCDF70000-0x000001EFCE7F7000-memory.dmp
memory/4808-546-0x000001EFCDF70000-0x000001EFCE7F7000-memory.dmp