Analysis
- max time kernel
148s - max time network
113s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
24/10/2026, 01:13
General
- Target 2026-10-22_a9f9d82935f9af6b4c8d06212da290cf_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
- Size 578KB
- Sample261024-bllywswt8p
- SHA256 6ba844355f7929c02c53b8839be885579f1a0d4841134c7eda79d0d0d8f32c72
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 6 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-22_a9f9d82935f9af6b4c8d06212da290cf_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-22_a9f9d82935f9af6b4c8d06212da290cf_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/236-10-0x00007FFDF05C0000-0x00007FFDF05C1000-memory.dmp
memory/236-12-0x0000012E6D3D0000-0x0000012E6D42A000-memory.dmp
memory/236-11-0x0000012E6D3D0000-0x0000012E6D42A000-memory.dmp
memory/236-0-0x00007FFDF0460000-0x00007FFDF06C3000-memory.dmp
memory/236-15-0x00007FFDF0460000-0x00007FFDF06C3000-memory.dmp
memory/236-14-0x0000012E6D4D0000-0x0000012E6D4E6000-memory.dmp
memory/236-17-0x00007FFDF0460000-0x00007FFDF06C3000-memory.dmp
memory/236-16-0x0000012E6DBB0000-0x0000012E6DC26000-memory.dmp
memory/236-13-0x00007FFDF0460000-0x00007FFDF06C3000-memory.dmp
memory/236-2-0x0000012E6D3D0000-0x0000012E6D42A000-memory.dmp
memory/236-9-0x0000012E6D3D0000-0x0000012E6D42A000-memory.dmp
memory/236-21-0x00007FFDF0460000-0x00007FFDF06C3000-memory.dmp
memory/236-20-0x00007FFDF0460000-0x00007FFDF06C3000-memory.dmp
memory/236-19-0x00007FFDF0460000-0x00007FFDF06C3000-memory.dmp
memory/236-22-0x0000012E6D6A0000-0x0000012E6D6BE000-memory.dmp
memory/236-24-0x00007FFDF0460000-0x00007FFDF06C3000-memory.dmp
memory/236-26-0x00007FFDF0460000-0x00007FFDF06C3000-memory.dmp
memory/236-25-0x00007FFDF0460000-0x00007FFDF06C3000-memory.dmp
memory/236-23-0x00007FFDF0460000-0x00007FFDF06C3000-memory.dmp
memory/236-18-0x00007FFDF0460000-0x00007FFDF06C3000-memory.dmp
memory/236-30-0x0000012E6D3D0000-0x0000012E6D42A000-memory.dmp
memory/236-33-0x00007FFDF0460000-0x00007FFDF06C3000-memory.dmp