Overview

overview

3

Static

static

3

2026-10-26...ar.exe

windows10-2004-x64

1

2026-10-26...ar.exe

windows11-ltsc_2024-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    126s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    27/10/2026, 11:33

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-10-26_94b43fd3f542972cc387afcef0bb8f3e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
  • Size 14.0MB
  • Sample261027-nnxvdstvdx
  • SHA256 67662a4f0c61f417d059505d96f8018f55ba9925bee7e1f868c76eb3b32f31f7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-10-26_94b43fd3f542972cc387afcef0bb8f3e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-10-26_94b43fd3f542972cc387afcef0bb8f3e_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:4228

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        mod.json
        • Path C:\Users\Admin\AppData\Local\Temp\neixian_modcfg_test_4228\res\cyc_a\mod.json
        • Size 34B
        • SHA256 4a0334e56153e1d0e483af0c86f578c60ac7d57d213100ba1f1d981a0925e82a
        • MD5 SHA1 SHA512
        Submit Download

        mod.json
        • Path C:\Users\Admin\AppData\Local\Temp\neixian_modcfg_test_4228\res\cyc_b\mod.json
        • Size 34B
        • SHA256 0540d5cb4ab535b9244c56e878a53a8e9d78658368261d9a7074aec6792650d5
        • MD5 SHA1 SHA512
        Submit Download

        mod.json
        • Path C:\Users\Admin\AppData\Local\Temp\neixian_modcfg_test_4228\res\needs_ghost\mod.json
        • Size 40B
        • SHA256 df43fbfb59e9c8742fdf061f9e9e453acfee65b11a4fd077f8042df748dcac8b
        • MD5 SHA1 SHA512
        Submit Download

        mod.json
        • Path C:\Users\Admin\AppData\Local\Temp\neixian_modcfg_test_4228\res\needs_needs\mod.json
        • Size 60B
        • SHA256 3ed823d739f2855f725a13c88f133a204f42d35e10602c3fa13d45beb1c19dfb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        mod.json
        • Path C:\Users\Admin\AppData\Local\Temp\neixian_modcfg_test_4228\res\ui_a\mod.json
        • Size 93B
        • SHA256 17f903e13220979bc0392a3a20fb7a880b3f352047db94ec687aaac9dd6a83b6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        mod.json
        • Path C:\Users\Admin\AppData\Local\Temp\neixian_modcfg_test_4228\res\ui_b\mod.json
        • Size 46B
        • SHA256 67cfa14406348f691b124b48a2634b0c1aba199525a811f22fc343c43fa706cc
        • MD5 SHA1 SHA512
        Submit Download

        mod.json
        • Path C:\Users\Admin\AppData\Local\Temp\neixian_modcfg_test_4228\user\ui_b\mod.json
        • Size 62B
        • SHA256 28ad788c7d475cdcf73c77a8c200ecfecf0593587151fb963f0d6c4d01bc8e43
        • MD5 SHA1 SHA512 TLSH
        Submit Download