Analysis
- max time kernel
149s - max time network
138s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
25/09/2026, 22:41
General
- Target 2026-09-25_946f81fbe666789d8d9c6ea6c01e1084_glassworm_icedid_njrat_ryuk.exe
- Size 1.5MB
- Sample260925-2mfrdaybrc
- SHA256 b7505876a5f6972dea072006f9f592cabb9ab9205c80a7d156999f0df167dd21
Score
5/10
Malware Config
Signatures
- Drops file in System32 directory 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-25_946f81fbe666789d8d9c6ea6c01e1084_glassworm_icedid_njrat_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-25_946f81fbe666789d8d9c6ea6c01e1084_glassworm_icedid_njrat_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1264-0-0x0000000140000000-0x0000000140186000-memory.dmp
memory/1264-1-0x0000000000810000-0x0000000000870000-memory.dmp
memory/1264-12-0x0000000000810000-0x0000000000870000-memory.dmp
memory/1264-9-0x0000000000810000-0x0000000000870000-memory.dmp
memory/1264-14-0x0000000140000000-0x0000000140186000-memory.dmp