Overview

overview

7

Static

static

3

2026-09-10...ar.exe

windows10-2004-x64

7

2026-09-10...ar.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    142s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    10/09/2026, 17:36

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-09-10_430758a687a2abc1a5bf689dca86067e_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
  • Size 9.7MB
  • Sample260910-v6ly6stape
  • SHA256 e70172ae5e0c1e4f3366f23f131d599353f600c8dabdd802d41c4c48d20f3f32
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 11 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-09-10_430758a687a2abc1a5bf689dca86067e_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-09-10_430758a687a2abc1a5bf689dca86067e_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4472
    • C:\Users\Admin\AppData\Local\Temp\2026-09-10_430758a687a2abc1a5bf689dca86067e_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-09-10_430758a687a2abc1a5bf689dca86067e_cobalt-strike_glassworm_icedid_njrat_satacom_vidar.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      PID:2992

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44722\VCRUNTIME140.dll
        • Size 85KB
        • SHA256 d89c7b863fc1ac3a179d45d5fe1b9fd35fb6fbd45171ca68d0d68ab1c1ad04fb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44722\_bz2.pyd
        • Size 92KB
        • SHA256 caf5544d3dedc1e7eae3c32895dffcd9cab54904eb2bd5149a68480622702b28
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44722\_ctypes.pyd
        • Size 128KB
        • SHA256 6535a1127e6267c3db2046d24bb350946236899d372b85357395be66cb67e701
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44722\_hashlib.pyd
        • Size 1.6MB
        • SHA256 a6fcba0c96ae6bd77ab3cf2e1f00123a7a078af8352e29748110e1cfa7e0645f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44722\_lzma.pyd
        • Size 248KB
        • SHA256 3621b4a48f64a85505d15d73eb347933ecb3ff87844a33d24a535ac4b0720ce1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44722\base_library.zip
        • Size 750KB
        • SHA256 b6ba01d492400aa37eaada571f197be5ac9969c6f7e32111b43dc49991ec21f2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python36.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44722\python36.dll
        • Size 3.4MB
        • SHA256 a082a2ab69ebf8f1bfabcd2387de47b95cb0f142d5ef39571e1f667131d64847
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pythoncom36.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44722\pythoncom36.dll
        • Size 679KB
        • SHA256 9ed56f96f60915039eb192cf5e0f0072f3112730625ea5b979143c7c4604952d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pywintypes36.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44722\pywintypes36.dll
        • Size 142KB
        • SHA256 119feb584128e27f91586b0199dba7eaf5689807bbddd2c46fb9af22426715a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tinyaes.cp36-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44722\tinyaes.cp36-win_amd64.pyd
        • Size 39KB
        • SHA256 38d7d8901239d35a57fd9616fa5c24b8c32ed533af8ebed180640c83e9473d4e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44722\ucrtbase.dll
        • Size 938KB
        • SHA256 2195fef9bd0a01d6b10a2ab77ff4f5bbca01d65d5f6590befc98d80102372605
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        win32api.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI44722\win32api.pyd
        • Size 136KB
        • SHA256 bcb31dffd8263eccdd18bd5646264ddb28dabd965258118181a375ea58dc6712
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download