Analysis
- max time kernel
148s - max time network
146s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
23/09/2026, 18:57
General
- Target 2026-09-23_af6e5b6511e4b581d7b63846c18e2b43_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
- Size 12.1MB
- Sample260923-xmbefaab39
- SHA256 813bb9a66147145484a30ae7f8450100257450e0fd46a990055fc1b8778f3ccd
Malware Config
Signatures
- Loads dropped DLL 23 IoCs
- UPX packed file 63 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-23_af6e5b6511e4b581d7b63846c18e2b43_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-23_af6e5b6511e4b581d7b63846c18e2b43_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\2026-09-23_af6e5b6511e4b581d7b63846c18e2b43_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-23_af6e5b6511e4b581d7b63846c18e2b43_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"2⤵
- Loads dropped DLL
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
VCRUNTIME140.dll
_bz2.pyd
_cffi_backend.cp313-win_amd64.pyd
_ctypes.pyd
_hashlib.pyd
_lzma.pyd
_queue.pyd
_socket.pyd
_ssl.pyd
_zstd.cp313-win_amd64.pyd
base_library.zip
cd.cp313-win_amd64.pyd
md.cp313-win_amd64.pyd
libcrypto-3.dll
libffi-8.dll
libssl-3.dll
_sodium.pyd
python3.dll
python313.dll
select.pyd
ucrtbase.dll
unicodedata.pyd
memory/5880-145-0x00007FFC89400000-0x00007FFC8946B000-memory.dmp
memory/5880-150-0x0000015AB1890000-0x0000015AB1DC4000-memory.dmp
memory/5880-114-0x0000015AB1890000-0x0000015AB1DC4000-memory.dmp
memory/5880-113-0x00007FFC81010000-0x00007FFC81544000-memory.dmp
memory/5880-129-0x00007FFC90BD0000-0x00007FFC90BE9000-memory.dmp
memory/5880-95-0x00007FFC91590000-0x00007FFC915B7000-memory.dmp
memory/5880-97-0x00007FFC96C50000-0x00007FFC96C5F000-memory.dmp
memory/5880-101-0x00007FFC96880000-0x00007FFC9689A000-memory.dmp
memory/5880-139-0x00007FFC8A1F0000-0x00007FFC8A229000-memory.dmp
memory/5880-107-0x00007FFC912E0000-0x00007FFC91313000-memory.dmp
memory/5880-148-0x00007FFC8A1B0000-0x00007FFC8A1E6000-memory.dmp
memory/5880-147-0x00007FFC89510000-0x00007FFC895DE000-memory.dmp
memory/5880-110-0x00007FFC89510000-0x00007FFC895DE000-memory.dmp
memory/5880-144-0x00007FFC912E0000-0x00007FFC91313000-memory.dmp
memory/5880-103-0x00007FFC969A0000-0x00007FFC969AD000-memory.dmp
memory/5880-141-0x00007FFC82920000-0x00007FFC82BD6000-memory.dmp
memory/5880-140-0x00007FFC86EF0000-0x00007FFC86FA4000-memory.dmp
memory/5880-137-0x00007FFC90BA0000-0x00007FFC90BCB000-memory.dmp
memory/5880-87-0x00007FFC82BE0000-0x00007FFC8324F000-memory.dmp
memory/5880-125-0x00007FFC96680000-0x00007FFC9668D000-memory.dmp
memory/5880-124-0x00007FFC91590000-0x00007FFC915B7000-memory.dmp
memory/5880-121-0x00007FFC91E10000-0x00007FFC91E26000-memory.dmp
memory/5880-120-0x00007FFC82BE0000-0x00007FFC8324F000-memory.dmp
memory/5880-117-0x00007FFC89470000-0x00007FFC8950D000-memory.dmp
memory/5880-149-0x00007FFC81010000-0x00007FFC81544000-memory.dmp
memory/5880-151-0x00007FFC89470000-0x00007FFC8950D000-memory.dmp
memory/5880-152-0x00007FFC82BE0000-0x00007FFC8324F000-memory.dmp
memory/5880-168-0x00007FFC89400000-0x00007FFC8946B000-memory.dmp
memory/5880-170-0x00007FFC82BE0000-0x00007FFC8324F000-memory.dmp
memory/5880-202-0x00007FFC8A1F0000-0x00007FFC8A229000-memory.dmp
memory/5880-188-0x00007FFC82BE0000-0x00007FFC8324F000-memory.dmp
memory/5880-203-0x00007FFC86EF0000-0x00007FFC86FA4000-memory.dmp
memory/5880-195-0x00007FFC81010000-0x00007FFC81544000-memory.dmp
memory/5880-204-0x00007FFC89400000-0x00007FFC8946B000-memory.dmp
memory/5880-205-0x00007FFC8A1B0000-0x00007FFC8A1E6000-memory.dmp
memory/5880-201-0x00007FFC82920000-0x00007FFC82BD6000-memory.dmp
memory/5880-200-0x00007FFC90BA0000-0x00007FFC90BCB000-memory.dmp
memory/5880-199-0x00007FFC90BD0000-0x00007FFC90BE9000-memory.dmp
memory/5880-198-0x00007FFC96680000-0x00007FFC9668D000-memory.dmp
memory/5880-196-0x00007FFC89470000-0x00007FFC8950D000-memory.dmp
memory/5880-194-0x00007FFC89510000-0x00007FFC895DE000-memory.dmp
memory/5880-193-0x00007FFC912E0000-0x00007FFC91313000-memory.dmp
memory/5880-192-0x00007FFC969A0000-0x00007FFC969AD000-memory.dmp
memory/5880-191-0x00007FFC96880000-0x00007FFC9689A000-memory.dmp
memory/5880-190-0x00007FFC96C50000-0x00007FFC96C5F000-memory.dmp
memory/5880-189-0x00007FFC91590000-0x00007FFC915B7000-memory.dmp
memory/5880-197-0x00007FFC91E10000-0x00007FFC91E26000-memory.dmp