Analysis

  • max time kernel
    149s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    18/04/2026, 04:38

General

  • Target
    2026-04-18_41f0b464a112aeeebbc2e3d746233c56_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
  • Size 12.8MB
  • Sample260418-e9d5qsax5j
  • SHA256 09ada275eda3551a25dc55a36138363a5d3bdd428dba55bce3f71108e985a998
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 22 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-04-18_41f0b464a112aeeebbc2e3d746233c56_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-04-18_41f0b464a112aeeebbc2e3d746233c56_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4176
    • C:\Users\Admin\AppData\Local\Temp\2026-04-18_41f0b464a112aeeebbc2e3d746233c56_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-04-18_41f0b464a112aeeebbc2e3d746233c56_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
      2⤵
      • Loads dropped DLL
      PID:4488

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _asyncio.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\_asyncio.pyd
        • Size 71KB
        • SHA256 53b36f719ee1905e56003a5d8af169fe05917787af66d00c86ceaf996a7d5caf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\_bz2.pyd
        • Size 84KB
        • SHA256 df21ec68d062eb375dba4ea8332aa859d0d4b91f9eddc45e1cebfd54742044e2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ctypes.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\_ctypes.pyd
        • Size 131KB
        • SHA256 c95add0b1a541b723c9090c23abeadb8f642b31bb33f2e1ae005fbb8a331ef73
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _decimal.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\_decimal.pyd
        • Size 279KB
        • SHA256 e80e2c4533958c717f40238155bd9f4101df23f832e1dddb8be4e83f7ad3355a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _hashlib.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\_hashlib.pyd
        • Size 67KB
        • SHA256 8770291fed8af2ea8e9fd2ed695e8c56f8e26848c91d320d1a22ddf404d02116
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _lzma.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\_lzma.pyd
        • Size 155KB
        • SHA256 1ddce9934889905b482f8587656f28ae1988365a55ae86ca4438873fd0184340
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _multiprocessing.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\_multiprocessing.pyd
        • Size 37KB
        • SHA256 f812b488ea8ae37c7da58f3068a1d08b1c66f9a7858610652bc4329843e0b876
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-core-console-l1-1-0.dll
        • Size 22KB
        • SHA256 bb3c8b7da5853894df0783a9b1ffe5bd139ce0ea5c035ebe6ad61b5f819d04ac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-core-datetime-l1-1-0.dll
        • Size 22KB
        • SHA256 15c28b46f83b17308dfc8aa8701b46556cae3b033a32b2ddf02447016baa2805
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-core-debug-l1-1-0.dll
        • Size 22KB
        • SHA256 db64f11091399feab8c0c37ccf7587f8ab577e4e649cbdb275bfedbd90247b42
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 22KB
        • SHA256 37ee0b885888b66a4beab2e8007ca5534f5db3f22ecf8c661c4751ad9644564e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-fibers-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-core-fibers-l1-1-0.dll
        • Size 22KB
        • SHA256 3e425d0eda78a286f116dddbae7fe59c834e8d351ba573472aaa1f82f677b1e0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-core-file-l1-1-0.dll
        • Size 26KB
        • SHA256 6a130948aaf902f832732e3c49fbc6e29ee489f90c129255443973ba28236c97
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-core-file-l1-2-0.dll
        • Size 22KB
        • SHA256 0fa9cdcbcaf0e0b9f0cab732f7adc592349de871a8b3cb3646586402c626464c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-core-file-l2-1-0.dll
        • Size 22KB
        • SHA256 2cf0cd84164533e10ca7cf9491502c86dcb6c8b292fc6ef86157e2bb6d733a24
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-core-handle-l1-1-0.dll
        • Size 22KB
        • SHA256 143db2a80211e4b2eedf551a2411e3023ddc38262c1f53bac1338cd62665e13a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-core-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 e3b8bff16bac8752c0372f29cd0386b80a43324c4f8f20e3ed3413fe9b4270b1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 22KB
        • SHA256 6c12f753673881f152150b560c34dc4eb2cafbb8f7a89d7300e647b4a585cf37
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 22KB
        • SHA256 5777753bb011396d2ae4dab26d31ee0290f2bbebb7033e26229cba51f2f9ae65
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-core-localization-l1-2-0.dll
        • Size 22KB
        • SHA256 1ce2345672770a8dfb2e8b79ee40d14bf9fdf81a844ae94f7a67d6978cdca977
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-core-memory-l1-1-0.dll
        • Size 22KB
        • SHA256 84d2a7aac4dc64bbc0ab3fbdcbdb24e92566d9d86d73f44f7ea935a0beda5566
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 22KB
        • SHA256 f94a397f20ad3878cac9e67cf3ffd99fe9f535cf12e5350823a697e3f6d0696b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 22KB
        • SHA256 7ab599b3804fd5ebd18088ea9e63b3abdbe6936ab6052d4782195a3c40ed5c01
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 22KB
        • SHA256 3b73a597cab87c570357f06a7771cc228283a57f65a9d4c0938dd98423c8c894
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 22KB
        • SHA256 b6e060f82db4f26d77d315e1deca8a1b1d946d019aaa6630af003ef42c3b8a07
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-core-profile-l1-1-0.dll
        • Size 22KB
        • SHA256 617e204d4b6c340c62379b26c325c69f4c1021836ca90ef93b880a7213ca4dfc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 22KB
        • SHA256 c50176c914b2a5029b2add848763af43f89b02bf86c96664b22b85504dd903c7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-core-string-l1-1-0.dll
        • Size 22KB
        • SHA256 c1e00ac12a37d989c525cc69437f81d5b22157c77ebcd8e500aba40a6575c57c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-core-synch-l1-1-0.dll
        • Size 22KB
        • SHA256 9e5c7cb4069ebf06dd13b929dab1ffc7f3dd8d74d08ce22838904ec6d4194c98
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-core-synch-l1-2-0.dll
        • Size 22KB
        • SHA256 ad4fa7e9d11a8f351a57497959a8e20e2bca57626dedda89bd4fd62346758baa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 22KB
        • SHA256 561b15988e5bb950f813698cf14d834ec970cd2f857964809ff5f750a6390175
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-core-timezone-l1-1-0.dll
        • Size 22KB
        • SHA256 8f7e702d98c64f258718f81d10dfcd314b4916010f27678f682f819c37b473f0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-core-util-l1-1-0.dll
        • Size 22KB
        • SHA256 7dc47a318ebf21fd21008e8a7327af522608b94d1f1075112c9738e1e4364266
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-crt-conio-l1-1-0.dll
        • Size 22KB
        • SHA256 511bd34d2393b5e8ff8b8b38b74e8772a2312ed1172c661dcbfcfe6aaedab138
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-crt-convert-l1-1-0.dll
        • Size 26KB
        • SHA256 63c54a50a39b6fafce0adc3be1cdec3cf597754f0e8e05084bceab18c0fcc2c7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-crt-environment-l1-1-0.dll
        • Size 22KB
        • SHA256 c057e7d13e063e4f9b25538f0e3a2f1e8e03cdeb0ddb9a88754e8b196f018f14
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 22KB
        • SHA256 0fed3024f70a94e2a9873dbf6cc2be892200ead20b598bdbe6b6187a8d32cb72
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-crt-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 d1334d533382e79ede1c6e1aab385b7e3f7edaffc93c2d7c1a133e5f70270bd4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-crt-locale-l1-1-0.dll
        • Size 22KB
        • SHA256 727412a0eddfb89c01c273c237e6aad041ae457055f5d1ee0f8376e2d63e006c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-crt-math-l1-1-0.dll
        • Size 30KB
        • SHA256 a73249e9fa00442d05f65f25ac83f770feb516361d2bb24920a7f91d27f901e2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-crt-process-l1-1-0.dll
        • Size 22KB
        • SHA256 a52df51065a3e70983f41cec10f9ff9bbb64466201d15f63723cf70df9ec9213
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 26KB
        • SHA256 15ef2a5af9579af0cace10335d20f4a8947520cb60f7f9b9b075350a9eb1cfea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 26KB
        • SHA256 bed0f8798ef828ccc9c53259dccc7f4bc99b49277657a597ce59f734e90e6cf0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-crt-string-l1-1-0.dll
        • Size 26KB
        • SHA256 95d5b4a4a61e5ce7e3e78d507c4c6a075d48a1656eac5bf5af1cd8e697d4d5e1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-crt-time-l1-1-0.dll
        • Size 22KB
        • SHA256 ea063eb7b37f43b3f09a9da7f989abfe542626585c24f2ba7e0e3ae80bd4cc58
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\api-ms-win-crt-utility-l1-1-0.dll
        • Size 22KB
        • SHA256 3d96a2a17d7e09b6420ed987391f94b8677f0f8caf37ac80146be5e4d572a0ff
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\base_library.zip
        • Size 1.3MB
        • SHA256 4367f78489ffcfcb9edf6f41b9a83bfb4d35aa9b0f08864205a04213788d9987
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypto-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 e03dd02fdcfb791981c9962827cfcf495f2a47a514c1526efb57f847a9df514a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libffi-8.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libssl-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\libssl-3.dll
        • Size 776KB
        • SHA256 1e4bc0638682bfcbb36f4465d6a2e9944d917a60f05ecc8ddf9e96847e05e13f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pyexpat.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\pyexpat.pyd
        • Size 212KB
        • SHA256 c00c4177b57a4e519fdb0e14381ec03f1ef4d627ee10280382e8e06030c61958
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python313.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\python313.dll
        • Size 5.8MB
        • SHA256 265a27242ee97f81eeac6a556fd7de56baff2222f2334386d8f948e359a649d8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        select.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\select.pyd
        • Size 32KB
        • SHA256 7d061afc87ba79f90878af39a1ebc7b4cf238d52e5bbe16ff7e176cbba266ec0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tcl86t.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\tcl86t.dll
        • Size 1.8MB
        • SHA256 a308beae8555cff5ac2aff7eaf0aef40b5fe173f047e246dc49da9a4d3ef62f9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tk86t.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\tk86t.dll
        • Size 1.5MB
        • SHA256 20f4876506bce7f89e53570e64fd1dce30a64548326b45f372871c7019560df4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ucrtbase.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\ucrtbase.dll
        • Size 1.1MB
        • SHA256 625036f80f8c11cc1f5134ceea8f24e54d02bc104ffc1fb0be76c0847226541d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unicodedata.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\unicodedata.pyd
        • Size 695KB
        • SHA256 85ec764b02ad20bd168779f4716841d8291d3be0d3a243dcfb05abe684a517dd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zlib1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI41762\zlib1.dll
        • Size 142KB
        • SHA256 1dd27f0411ebb31bd148a61589cee254410915f1e6c37aa3ffa52fac71a5426c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/4176-1109-0x000001FB6D180000-0x000001FB6D22C000-memory.dmp

        memory/4176-1076-0x000001FB6D180000-0x000001FB6D22C000-memory.dmp

        memory/4176-1070-0x000001FB6D180000-0x000001FB6D22C000-memory.dmp

        memory/4488-1071-0x00000185BFA20000-0x00000185BFACC000-memory.dmp

        memory/4488-1072-0x00007FFF55CA0000-0x00007FFF55CC9000-memory.dmp