Analysis
- max time kernel
148s - max time network
128s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
07/11/2026, 17:14
General
- Target 2026-11-07_09633f7743634fc73bf88dda3859b32d_glassworm_icedid_poet-rat.exe
- Size 11.9MB
- Sample261107-vsb7tadv5z
- SHA256 1d57ea4cde3775cc43c2e2c1c525d8f968bfe192fc2b8c43a45a475392fbad55
Malware Config
Signatures
- Custom signatureDetects executables packed with Enigma 4 IoCs
- Loads dropped DLL 7 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-11-07_09633f7743634fc73bf88dda3859b32d_glassworm_icedid_poet-rat.exe"C:\Users\Admin\AppData\Local\Temp\2026-11-07_09633f7743634fc73bf88dda3859b32d_glassworm_icedid_poet-rat.exe"1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
evb643A.tmp
evb6516.tmp
evb6575.tmp
evb65A5.tmp
evb65E4.tmp
evb65F5.tmp
evb6615.tmp
memory/1720-26-0x0000000002AD0000-0x0000000002C65000-memory.dmp
memory/1720-62-0x00007FFB12340000-0x00007FFB125A3000-memory.dmp
memory/1720-11-0x00007FFB12340000-0x00007FFB125A3000-memory.dmp
memory/1720-9-0x00007FFB12340000-0x00007FFB125A3000-memory.dmp
memory/1720-13-0x00000000029E0000-0x0000000002AC4000-memory.dmp
memory/1720-23-0x0000000002AD0000-0x0000000002C65000-memory.dmp
memory/1720-30-0x00007FFB12340000-0x00007FFB125A3000-memory.dmp
memory/1720-34-0x0000000000760000-0x00000000007AA000-memory.dmp
memory/1720-41-0x0000000002390000-0x000000000241E000-memory.dmp
memory/1720-58-0x0000000002D20000-0x0000000002E0F000-memory.dmp
memory/1720-54-0x0000000002D20000-0x0000000002E0F000-memory.dmp
memory/1720-49-0x0000000002C70000-0x0000000002D16000-memory.dmp
memory/1720-46-0x0000000002C70000-0x0000000002D16000-memory.dmp
memory/1720-38-0x0000000002390000-0x000000000241E000-memory.dmp
memory/1720-3-0x00007FFB12340000-0x00007FFB125A3000-memory.dmp
memory/1720-32-0x0000000000760000-0x00000000007AA000-memory.dmp
memory/1720-1-0x00007FFB1249F000-0x00007FFB124A0000-memory.dmp
memory/1720-0-0x0000000140000000-0x00000001400C1000-memory.dmp
memory/1720-17-0x00000000029E0000-0x0000000002AC4000-memory.dmp
memory/1720-60-0x00007FFB12340000-0x00007FFB125A3000-memory.dmp
memory/1720-61-0x00007FFB12340000-0x00007FFB125A3000-memory.dmp
memory/1720-6-0x0000000180000000-0x000000018053D000-memory.dmp
memory/1720-65-0x0000000002C70000-0x0000000002D16000-memory.dmp
memory/1720-64-0x0000000002390000-0x000000000241E000-memory.dmp
memory/1720-63-0x00007FFB12340000-0x00007FFB125A3000-memory.dmp
memory/1720-66-0x0000000002D20000-0x0000000002E0F000-memory.dmp
memory/1720-68-0x0000000180000000-0x000000018053D000-memory.dmp
memory/1720-71-0x0000000000760000-0x00000000007AA000-memory.dmp
memory/1720-70-0x0000000002AD0000-0x0000000002C65000-memory.dmp
memory/1720-69-0x00000000029E0000-0x0000000002AC4000-memory.dmp
memory/1720-67-0x00007FFB12340000-0x00007FFB125A3000-memory.dmp
memory/1720-72-0x0000000140000000-0x00000001400C1000-memory.dmp
memory/1720-73-0x0000000140000000-0x00000001400C1000-memory.dmp
memory/1720-75-0x00000000029E0000-0x0000000002AC4000-memory.dmp
memory/1720-76-0x0000000002AD0000-0x0000000002C65000-memory.dmp
memory/1720-90-0x00007FFB12340000-0x00007FFB125A3000-memory.dmp
memory/1720-81-0x0000000002D20000-0x0000000002E0F000-memory.dmp
memory/1720-74-0x0000000180000000-0x000000018053D000-memory.dmp
memory/1720-82-0x00007FFB12340000-0x00007FFB125A3000-memory.dmp
memory/1720-80-0x0000000002C70000-0x0000000002D16000-memory.dmp
memory/1720-78-0x0000000002390000-0x000000000241E000-memory.dmp
memory/1720-79-0x0000000140000000-0x00000001400C1000-memory.dmp
memory/1720-77-0x0000000000760000-0x00000000007AA000-memory.dmp