Analysis
- max time kernel
150s - max time network
133s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
09/10/2026, 16:34
General
- Target 2026-10-08_3f57e8054e629e1777a7bc3d0348f81c_glassworm_icedid_megazord_njrat_quasar-rat_ryuk_stealc_voidlink.exe
- Size 93.1MB
- Sample261009-t3hlxacf64
- SHA256 d8c9cc46a305ac2d5d99612724f378986f132036235dcb54f094f2e00aa8eaa9
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-08_3f57e8054e629e1777a7bc3d0348f81c_glassworm_icedid_megazord_njrat_quasar-rat_ryuk_stealc_voidlink.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-08_3f57e8054e629e1777a7bc3d0348f81c_glassworm_icedid_megazord_njrat_quasar-rat_ryuk_stealc_voidlink.exe"1⤵
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
.bun-1534026329-ec0fa178f1aa34c.dll
memory/4024-2-0x0000015A79001000-0x0000015A79002000-memory.dmp
memory/4024-1-0x0000015A79002000-0x0000015A79003000-memory.dmp
memory/4024-3-0x0000015A79003000-0x0000015A79004000-memory.dmp
memory/4024-4-0x0000015A79004000-0x0000015A79005000-memory.dmp
memory/4024-6-0x0000015A79006000-0x0000015A79007000-memory.dmp
memory/4024-7-0x0000015AB8FFF000-0x0000015AB9000000-memory.dmp
memory/4024-5-0x0000015A79005000-0x0000015A79006000-memory.dmp
memory/4024-10-0x0000015A7900A000-0x0000015A7900B000-memory.dmp
memory/4024-9-0x0000015A79008000-0x0000015A7900A000-memory.dmp
memory/4024-8-0x0000015A79007000-0x0000015A79008000-memory.dmp
memory/4024-11-0x0000015A79012000-0x0000015A79013000-memory.dmp
memory/4024-13-0x0000015A79002000-0x0000015A79003000-memory.dmp
memory/4024-12-0x0000015A79013000-0x0000015A79014000-memory.dmp
memory/4024-20-0x0000015A79004000-0x0000015A79005000-memory.dmp
memory/4024-18-0x0000015A7902D000-0x0000015A7902E000-memory.dmp
memory/4024-19-0x0000015A7902E000-0x0000015A7902F000-memory.dmp
memory/4024-23-0x0000015A79006000-0x0000015A79007000-memory.dmp
memory/4024-22-0x0000015A7905E000-0x0000015A7905F000-memory.dmp
memory/4024-21-0x0000015A7905D000-0x0000015A7905E000-memory.dmp
memory/4024-24-0x0000015A79031000-0x0000015A79032000-memory.dmp
memory/4024-30-0x0000015A7905F000-0x0000015A79062000-memory.dmp
memory/4024-28-0x0000015A79034000-0x0000015A79035000-memory.dmp
memory/4024-26-0x0000015A7903D000-0x0000015A7903E000-memory.dmp
memory/4024-29-0x0000015A7900A000-0x0000015A7900B000-memory.dmp
memory/4024-27-0x0000015A79033000-0x0000015A79034000-memory.dmp
memory/4024-25-0x0000015A79032000-0x0000015A79033000-memory.dmp
memory/4024-38-0x0000015A79040000-0x0000015A79041000-memory.dmp
memory/4024-40-0x0000015A79043000-0x0000015A79044000-memory.dmp
memory/4024-47-0x0000015A79035000-0x0000015A79036000-memory.dmp
memory/4024-46-0x0000015A79044000-0x0000015A79045000-memory.dmp
memory/4024-45-0x0000015A7903C000-0x0000015A7903D000-memory.dmp
memory/4024-44-0x0000015A79064000-0x0000015A79065000-memory.dmp
memory/4024-43-0x0000015A79065000-0x0000015A79066000-memory.dmp
memory/4024-50-0x0000015A79067000-0x0000015A79068000-memory.dmp
memory/4024-51-0x0000015A79068000-0x0000015A79069000-memory.dmp
memory/4024-54-0x0000015A7906B000-0x0000015A7906C000-memory.dmp
memory/4024-53-0x0000015A7906A000-0x0000015A7906B000-memory.dmp
memory/4024-52-0x0000015A79069000-0x0000015A7906A000-memory.dmp
memory/4024-49-0x0000015A79066000-0x0000015A79067000-memory.dmp
memory/4024-55-0x0000015A7906C000-0x0000015A7906D000-memory.dmp
memory/4024-57-0x0000015A7906D000-0x0000015A7906F000-memory.dmp
memory/4024-56-0x0000015A79062000-0x0000015A79063000-memory.dmp
memory/4024-48-0x0000015A7905E000-0x0000015A7905F000-memory.dmp
memory/4024-42-0x0000015A79037000-0x0000015A79038000-memory.dmp
memory/4024-41-0x0000015A7903F000-0x0000015A79040000-memory.dmp
memory/4024-39-0x0000015A79042000-0x0000015A79043000-memory.dmp
memory/4024-37-0x0000015A7902F000-0x0000015A79030000-memory.dmp
memory/4024-33-0x0000015A79015000-0x0000015A79016000-memory.dmp
memory/4024-32-0x0000015A79062000-0x0000015A79063000-memory.dmp
memory/4024-36-0x0000015A79041000-0x0000015A79042000-memory.dmp
memory/4024-35-0x0000015A7903E000-0x0000015A7903F000-memory.dmp
memory/4024-34-0x0000015A79016000-0x0000015A79017000-memory.dmp
memory/4024-31-0x0000015A79013000-0x0000015A79014000-memory.dmp
memory/4024-58-0x0000015A7906F000-0x0000015A79071000-memory.dmp
memory/4024-63-0x0000015A79067000-0x0000015A79068000-memory.dmp
memory/4024-62-0x0000015A79085000-0x0000015A79086000-memory.dmp
memory/4024-61-0x0000015A79084000-0x0000015A79085000-memory.dmp
memory/4024-60-0x0000015A79071000-0x0000015A79072000-memory.dmp
memory/4024-59-0x0000015A79065000-0x0000015A79066000-memory.dmp
memory/4024-66-0x0000015A79082000-0x0000015A79083000-memory.dmp
memory/4024-65-0x0000015A7907C000-0x0000015A79082000-memory.dmp
memory/4024-68-0x0000015A79086000-0x0000015A79087000-memory.dmp
memory/4024-67-0x0000015A79073000-0x0000015A79076000-memory.dmp
memory/4024-64-0x0000015A79072000-0x0000015A79073000-memory.dmp
memory/4024-75-0x0000015A79069000-0x0000015A7906A000-memory.dmp
memory/4024-85-0x0000015A79089000-0x0000015A7908A000-memory.dmp
memory/4024-89-0x0000015A79099000-0x0000015A7909B000-memory.dmp
memory/4024-93-0x0000015A7909D000-0x0000015A7909E000-memory.dmp
memory/4024-92-0x0000015A79097000-0x0000015A79099000-memory.dmp
memory/4024-91-0x0000015A79088000-0x0000015A79089000-memory.dmp
memory/4024-90-0x0000015A7909C000-0x0000015A7909D000-memory.dmp
memory/4024-88-0x0000015A7909B000-0x0000015A7909C000-memory.dmp
memory/4024-94-0x0000015A79085000-0x0000015A79086000-memory.dmp
memory/4024-87-0x0000015A79095000-0x0000015A79096000-memory.dmp
memory/4024-86-0x0000015A7908A000-0x0000015A7908B000-memory.dmp
memory/4024-84-0x0000015A79094000-0x0000015A79095000-memory.dmp
memory/4024-83-0x0000015A7906D000-0x0000015A7906F000-memory.dmp
memory/4024-82-0x0000015A7908B000-0x0000015A7908C000-memory.dmp
memory/4024-81-0x0000015A79092000-0x0000015A79094000-memory.dmp
memory/4024-80-0x0000015A79091000-0x0000015A79092000-memory.dmp
memory/4024-79-0x0000015A79090000-0x0000015A79091000-memory.dmp
memory/4024-78-0x0000015A7908E000-0x0000015A7908F000-memory.dmp
memory/4024-77-0x0000015A7908F000-0x0000015A79090000-memory.dmp
memory/4024-76-0x0000015A7908C000-0x0000015A7908E000-memory.dmp
memory/4024-74-0x0000015A79083000-0x0000015A79084000-memory.dmp
memory/4024-73-0x0000015A79077000-0x0000015A79078000-memory.dmp
memory/4024-72-0x0000015A79087000-0x0000015A79088000-memory.dmp
memory/4024-71-0x0000015A79076000-0x0000015A79077000-memory.dmp
memory/4024-70-0x0000015A79078000-0x0000015A7907A000-memory.dmp
memory/4024-69-0x0000015A7907A000-0x0000015A7907C000-memory.dmp
memory/4024-98-0x0000015A79092000-0x0000015A79093000-memory.dmp
memory/4024-101-0x0000015A790A2000-0x0000015A790A3000-memory.dmp
memory/4024-100-0x0000015A790A1000-0x0000015A790A2000-memory.dmp
memory/4024-99-0x0000015A7908C000-0x0000015A7908D000-memory.dmp
memory/4024-103-0x0000015A79087000-0x0000015A79088000-memory.dmp
memory/4024-102-0x0000015A79086000-0x0000015A79087000-memory.dmp