Analysis
- max time kernel
150s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
28/09/2026, 04:37
General
- Target 2026-09-27_73a3fd124328e1123d281202ac139356_akira_amadey_cobalt-strike_elex_glassworm_luca-stealer_njrat_remcos_vidar.exe
- Size 22.9MB
- Sample260928-e8x68avt6l
- SHA256 17f5b9ba04af8da7caa37ac9571ef77d980bd75f15ae7c8f51c93406dd18d68d
Malware Config
Signatures
- Loads dropped DLL 6 IoCs
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-27_73a3fd124328e1123d281202ac139356_akira_amadey_cobalt-strike_elex_glassworm_luca-stealer_njrat_remcos_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-27_73a3fd124328e1123d281202ac139356_akira_amadey_cobalt-strike_elex_glassworm_luca-stealer_njrat_remcos_vidar.exe"1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
InstallOptions.dll
SetupWizardSteps.ini
SetupWizardSteps.ini
SetupWizardSteps.ini
System.dll
UserInfo.dll
ioSpecial.ini
nsDialogs.dll
memory/2824-221-0x00000000743F0000-0x0000000074404000-memory.dmp
memory/2824-242-0x0000000000400000-0x0000000000477000-memory.dmp
memory/2824-200-0x0000000074630000-0x000000007463F000-memory.dmp
memory/2824-199-0x0000000000400000-0x0000000000477000-memory.dmp
memory/2824-219-0x0000000000400000-0x0000000000477000-memory.dmp
memory/2824-222-0x0000000074620000-0x000000007462C000-memory.dmp
memory/2824-4-0x0000000074639000-0x000000007463A000-memory.dmp
memory/2824-231-0x0000000000400000-0x0000000000477000-memory.dmp
memory/2824-234-0x0000000074620000-0x000000007462C000-memory.dmp
memory/2824-232-0x0000000074630000-0x000000007463F000-memory.dmp
memory/2824-236-0x0000000000400000-0x0000000000477000-memory.dmp
memory/2824-201-0x00000000743F0000-0x0000000074404000-memory.dmp
memory/2824-248-0x0000000000400000-0x0000000000477000-memory.dmp
memory/2824-253-0x0000000000400000-0x0000000000477000-memory.dmp
memory/2824-259-0x0000000000400000-0x0000000000477000-memory.dmp
memory/2824-264-0x0000000000400000-0x0000000000477000-memory.dmp
memory/2824-270-0x0000000000400000-0x0000000000477000-memory.dmp
memory/2824-275-0x0000000000400000-0x0000000000477000-memory.dmp
memory/2824-281-0x0000000000400000-0x0000000000477000-memory.dmp
memory/2824-286-0x0000000000400000-0x0000000000477000-memory.dmp
memory/2824-292-0x0000000000400000-0x0000000000477000-memory.dmp