Analysis

  • max time kernel
    149s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    10/11/2026, 21:34

General

  • Target
    2026-11-09_41eb4e46fddf958402f290e8ac57cec7_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom_stealc.exe
  • Size 653KB
  • Sample261110-1evd5abd36
  • SHA256 b79fecfcba55ddc07d7ac598b67925d496eb0dcf26b94d1b3c8f769e9231e5f4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-11-09_41eb4e46fddf958402f290e8ac57cec7_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom_stealc.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-11-09_41eb4e46fddf958402f290e8ac57cec7_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom_stealc.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1432

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Модуль.lua

        • Path C:\Users\Admin\AppData\Local\Temp\luacompile-manifest-541602579990\Модуль.lua
        • Size 8B
        • SHA256 8373f7e086bb27784827ef8f2f4ae118e05d58b67f513f82c2316dc57b0d896c
        • MD5 SHA1 SHA512

        𐐀.lua

        • Path C:\Users\Admin\AppData\Local\Temp\luacompile-manifest-541639144190\𐐀.lua
        • Size 8B
        • SHA256 486d9affb60dbb0063b03d8e23a6ccf6364ce203dc3a9f56f20e750eb41ecade
        • MD5 SHA1 SHA512

        extension.json

        • Path C:\Users\Admin\AppData\Local\Temp\luacompile-manifest-541648199740\Новое расширение\extension.json
        • Size 50B
        • SHA256 59572c4f46e69cbd53ace27c8566c8b380ac535361461662095c9a80c76a6439
        • MD5 SHA1 SHA512 TLSH

        util.lua

        • Path C:\Users\Admin\AppData\Local\Temp\luacompile-manifest-541652902950\nested\util.lua
        • Size 9B
        • SHA256 e115c9b995f74018636bff111f65edb17dc88607987af947e055b0736097ff6e
        • MD5 SHA1 SHA512