Analysis
- max time kernel
149s - max time network
138s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
09/10/2026, 16:34
General
- Target 2026-10-08_3f57e8054e629e1777a7bc3d0348f81c_glassworm_icedid_megazord_njrat_quasar-rat_ryuk_stealc_voidlink.exe
- Size 93.1MB
- Sample261009-t3hlxacf64
- SHA256 d8c9cc46a305ac2d5d99612724f378986f132036235dcb54f094f2e00aa8eaa9
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-08_3f57e8054e629e1777a7bc3d0348f81c_glassworm_icedid_megazord_njrat_quasar-rat_ryuk_stealc_voidlink.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-08_3f57e8054e629e1777a7bc3d0348f81c_glassworm_icedid_megazord_njrat_quasar-rat_ryuk_stealc_voidlink.exe"1⤵
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
.bun-1534026329-ec0fa178f1aa34c.dll
memory/4244-2-0x000001B7D8511000-0x000001B7D8512000-memory.dmp
memory/4244-1-0x000001B7D8512000-0x000001B7D8513000-memory.dmp
memory/4244-3-0x000001B7D8513000-0x000001B7D8514000-memory.dmp
memory/4244-4-0x000001B7D8514000-0x000001B7D8515000-memory.dmp
memory/4244-6-0x000001B7D8515000-0x000001B7D8516000-memory.dmp
memory/4244-5-0x000001B7D8516000-0x000001B7D8517000-memory.dmp
memory/4244-10-0x000001B7D851A000-0x000001B7D851B000-memory.dmp
memory/4244-13-0x000001B7D851D000-0x000001B7D851E000-memory.dmp
memory/4244-12-0x000001B7D851C000-0x000001B7D851D000-memory.dmp
memory/4244-11-0x000001B7D851B000-0x000001B7D851C000-memory.dmp
memory/4244-9-0x000001B7D8517000-0x000001B7D8518000-memory.dmp
memory/4244-8-0x000001B7D8519000-0x000001B7D851A000-memory.dmp
memory/4244-7-0x000001B7D8518000-0x000001B7D8519000-memory.dmp
memory/4244-16-0x000001B7D8522000-0x000001B7D8523000-memory.dmp
memory/4244-18-0x000001B7D8514000-0x000001B7D8515000-memory.dmp
memory/4244-17-0x000001B7D851E000-0x000001B7D851F000-memory.dmp
memory/4244-15-0x000001B7D851F000-0x000001B7D8522000-memory.dmp
memory/4244-19-0x000001B7D8523000-0x000001B7D8524000-memory.dmp
memory/4244-14-0x000001B7D8512000-0x000001B7D8513000-memory.dmp
memory/4244-26-0x000001B7D8516000-0x000001B7D8517000-memory.dmp
memory/4244-25-0x000001B7D853E000-0x000001B7D853F000-memory.dmp
memory/4244-24-0x000001B7D8528000-0x000001B7D853E000-memory.dmp
memory/4244-29-0x000001B7D851A000-0x000001B7D851B000-memory.dmp
memory/4244-28-0x000001B7D856E000-0x000001B7D856F000-memory.dmp
memory/4244-27-0x000001B7D853F000-0x000001B7D8540000-memory.dmp
memory/4244-37-0x000001B7D8522000-0x000001B7D8523000-memory.dmp
memory/4244-36-0x000001B7D8545000-0x000001B7D8546000-memory.dmp
memory/4244-35-0x000001B7D8544000-0x000001B7D8545000-memory.dmp
memory/4244-34-0x000001B7D854E000-0x000001B7D854F000-memory.dmp
memory/4244-33-0x000001B7D8543000-0x000001B7D8544000-memory.dmp
memory/4244-39-0x000001B81850F000-0x000001B818510000-memory.dmp
memory/4244-38-0x000001B7D8570000-0x000001B7D8573000-memory.dmp
memory/4244-32-0x000001B7D851B000-0x000001B7D851C000-memory.dmp
memory/4244-31-0x000001B7D8542000-0x000001B7D8543000-memory.dmp
memory/4244-30-0x000001B7D856F000-0x000001B7D8570000-memory.dmp
memory/4244-40-0x000001B7D854D000-0x000001B7D854E000-memory.dmp
memory/4244-53-0x000001B7D856E000-0x000001B7D856F000-memory.dmp
memory/4244-52-0x000001B7D8548000-0x000001B7D8549000-memory.dmp
memory/4244-51-0x000001B7D8550000-0x000001B7D8551000-memory.dmp
memory/4244-50-0x000001B7D8554000-0x000001B7D8555000-memory.dmp
memory/4244-56-0x000001B7D854C000-0x000001B7D854D000-memory.dmp
memory/4244-55-0x000001B7D8576000-0x000001B7D8577000-memory.dmp
memory/4244-54-0x000001B7D8575000-0x000001B7D8576000-memory.dmp
memory/4244-49-0x000001B7D854F000-0x000001B7D8550000-memory.dmp
memory/4244-48-0x000001B7D8540000-0x000001B7D8541000-memory.dmp
memory/4244-47-0x000001B7D8553000-0x000001B7D8554000-memory.dmp
memory/4244-46-0x000001B7D8551000-0x000001B7D8552000-memory.dmp
memory/4244-45-0x000001B7D8552000-0x000001B7D8553000-memory.dmp
memory/4244-44-0x000001B7D8573000-0x000001B7D8574000-memory.dmp
memory/4244-43-0x000001B7D8527000-0x000001B7D8528000-memory.dmp
memory/4244-42-0x000001B7D8526000-0x000001B7D8527000-memory.dmp
memory/4244-41-0x000001B7D8525000-0x000001B7D8526000-memory.dmp
memory/4244-58-0x000001B7D8578000-0x000001B7D8579000-memory.dmp
memory/4244-60-0x000001B7D8524000-0x000001B7D8525000-memory.dmp
memory/4244-63-0x000001B7D8570000-0x000001B7D8573000-memory.dmp
memory/4244-65-0x000001B7D857F000-0x000001B7D8580000-memory.dmp
memory/4244-64-0x000001B7D857E000-0x000001B7D857F000-memory.dmp
memory/4244-62-0x000001B7D857D000-0x000001B7D857E000-memory.dmp
memory/4244-61-0x000001B7D857B000-0x000001B7D857D000-memory.dmp
memory/4244-59-0x000001B7D8579000-0x000001B7D857B000-memory.dmp
memory/4244-57-0x000001B7D8577000-0x000001B7D8578000-memory.dmp
memory/4244-66-0x000001B7D8580000-0x000001B7D8581000-memory.dmp
memory/4244-67-0x000001B7D8581000-0x000001B7D8582000-memory.dmp
memory/4244-70-0x000001B7D8594000-0x000001B7D8595000-memory.dmp
memory/4244-69-0x000001B7D8582000-0x000001B7D8583000-memory.dmp
memory/4244-68-0x000001B7D8576000-0x000001B7D8577000-memory.dmp
memory/4244-72-0x000001B7D8595000-0x000001B7D8596000-memory.dmp
memory/4244-71-0x000001B7D8577000-0x000001B7D8578000-memory.dmp
memory/4244-74-0x000001B7D8596000-0x000001B7D8597000-memory.dmp
memory/4244-73-0x000001B7D8578000-0x000001B7D8579000-memory.dmp
memory/4244-76-0x000001B7D858C000-0x000001B7D8593000-memory.dmp
memory/4244-77-0x000001B7D8583000-0x000001B7D8586000-memory.dmp
memory/4244-89-0x000001B7D8593000-0x000001B7D8594000-memory.dmp
memory/4244-88-0x000001B7D8587000-0x000001B7D8588000-memory.dmp
memory/4244-90-0x000001B7D8580000-0x000001B7D8581000-memory.dmp
memory/4244-94-0x000001B7D859E000-0x000001B7D859F000-memory.dmp
memory/4244-100-0x000001B7D85A0000-0x000001B7D85A1000-memory.dmp
memory/4244-99-0x000001B7D85AA000-0x000001B7D85AB000-memory.dmp
memory/4244-98-0x000001B7D85A4000-0x000001B7D85A5000-memory.dmp
memory/4244-97-0x000001B7D859F000-0x000001B7D85A0000-memory.dmp
memory/4244-96-0x000001B7D85A8000-0x000001B7D85AA000-memory.dmp
memory/4244-95-0x000001B7D85A7000-0x000001B7D85A8000-memory.dmp
memory/4244-93-0x000001B7D8594000-0x000001B7D8595000-memory.dmp
memory/4244-92-0x000001B7D85A6000-0x000001B7D85A7000-memory.dmp
memory/4244-91-0x000001B7D85A5000-0x000001B7D85A6000-memory.dmp
memory/4244-87-0x000001B7D859D000-0x000001B7D859E000-memory.dmp
memory/4244-86-0x000001B7D858A000-0x000001B7D858C000-memory.dmp
memory/4244-85-0x000001B7D8588000-0x000001B7D858A000-memory.dmp
memory/4244-84-0x000001B7D8586000-0x000001B7D8587000-memory.dmp
memory/4244-83-0x000001B7D8599000-0x000001B7D859A000-memory.dmp
memory/4244-82-0x000001B7D8598000-0x000001B7D8599000-memory.dmp
memory/4244-81-0x000001B7D8597000-0x000001B7D8598000-memory.dmp
memory/4244-80-0x000001B7D859B000-0x000001B7D859D000-memory.dmp
memory/4244-79-0x000001B7D859A000-0x000001B7D859B000-memory.dmp
memory/4244-78-0x000001B7D857F000-0x000001B7D8580000-memory.dmp
memory/4244-75-0x000001B7D857D000-0x000001B7D857E000-memory.dmp