Analysis
- max time kernel
150s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
- submitted
29/06/2026, 02:05
General
- Target 2026-06-27_e01aaad0292abc31416bdd4e3293efe6_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
- Size 52.9MB
- Sample260629-cjbktab13n
- SHA256 17721884c08a06e5cb39a7f8417e9510e8bfbf47a9fb2b7585759551baee5f88
Malware Config
Signatures
- Loads dropped DLL 44 IoCs
- UPX packed file 64 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-06-27_e01aaad0292abc31416bdd4e3293efe6_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-06-27_e01aaad0292abc31416bdd4e3293efe6_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\2026-06-27_e01aaad0292abc31416bdd4e3293efe6_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-06-27_e01aaad0292abc31416bdd4e3293efe6_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"2⤵
- Loads dropped DLL
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
MSVCP140.dll
MSVCP140_1.dll
Qt5Core.dll
Qt5Gui.dll
Qt5Widgets.dll
qminimal.dll
QtCore.pyd
QtGui.pyd
QtWidgets.pyd
sip.cp313-win_amd64.pyd
VCRUNTIME140.dll
VCRUNTIME140_1.dll
_bz2.pyd
_ctypes.pyd
_hashlib.pyd
_lzma.pyd
_queue.pyd
_socket.pyd
_ssl.pyd
_wmi.pyd
base_library.zip
libcrypto-3.dll
libffi-8.dll
libssl-3.dll
pyexpat.pyd
python3.DLL
python313.dll
select.pyd
Lorem ipsum.txt
ucrtbase.dll
unicodedata.pyd
backend_c.cp313-win_amd64.pyd
memory/4772-318-0x00007FFD2AFE0000-0x00007FFD2B84A000-memory.dmp
memory/4772-337-0x00007FFD2BE50000-0x00007FFD2C393000-memory.dmp
memory/4772-285-0x00007FFD391A0000-0x00007FFD391D3000-memory.dmp
memory/4772-291-0x00007FFD39160000-0x00007FFD39197000-memory.dmp
memory/4772-283-0x00007FFD42E70000-0x00007FFD42E97000-memory.dmp
memory/4772-290-0x00007FFD44780000-0x00007FFD4479A000-memory.dmp
memory/4772-279-0x00007FFD2CA60000-0x00007FFD2CF93000-memory.dmp
memory/4772-278-0x00007FFD2D710000-0x00007FFD2DD7C000-memory.dmp
memory/4772-276-0x00007FFD40320000-0x00007FFD40336000-memory.dmp
memory/4772-301-0x00007FFD2D470000-0x00007FFD2D702000-memory.dmp
memory/4772-302-0x00007FFD2C3A0000-0x00007FFD2C9E1000-memory.dmp
memory/4772-271-0x00007FFD416E0000-0x00007FFD416EF000-memory.dmp
memory/4772-305-0x00007FFD36AC0000-0x00007FFD36AE8000-memory.dmp
memory/4772-265-0x00007FFD460E0000-0x00007FFD460ED000-memory.dmp
memory/4772-268-0x00007FFD42DC0000-0x00007FFD42DCD000-memory.dmp
memory/4772-261-0x00007FFD40350000-0x00007FFD40369000-memory.dmp
memory/4772-312-0x00007FFD416E0000-0x00007FFD416EF000-memory.dmp
memory/4772-316-0x00007FFD40320000-0x00007FFD40336000-memory.dmp
memory/4772-313-0x00007FFD2B850000-0x00007FFD2BE41000-memory.dmp
memory/4772-311-0x00007FFD2BE50000-0x00007FFD2C393000-memory.dmp
memory/4772-317-0x00007FFD2CA60000-0x00007FFD2CF93000-memory.dmp
memory/4772-258-0x00007FFD405A0000-0x00007FFD405CB000-memory.dmp
memory/4772-319-0x000001FF3C9C0000-0x000001FF3D22A000-memory.dmp
memory/4772-255-0x00007FFD44780000-0x00007FFD4479A000-memory.dmp
memory/4772-322-0x00007FFD391A0000-0x00007FFD391D3000-memory.dmp
memory/4772-252-0x00007FFD48250000-0x00007FFD4825F000-memory.dmp
memory/4772-250-0x00007FFD42E70000-0x00007FFD42E97000-memory.dmp
memory/4772-330-0x00007FFD2D470000-0x00007FFD2D702000-memory.dmp
memory/4772-331-0x00007FFD2D3B0000-0x00007FFD2D462000-memory.dmp
memory/4772-333-0x000001FF3CAC0000-0x000001FF3CAD0000-memory.dmp
memory/4772-241-0x00007FFD2D710000-0x00007FFD2DD7C000-memory.dmp
memory/4772-329-0x00007FFD30770000-0x00007FFD307F7000-memory.dmp
memory/4772-326-0x00007FFD36680000-0x00007FFD3674E000-memory.dmp
memory/4772-325-0x00007FFD2AD40000-0x00007FFD2AFDA000-memory.dmp
memory/4772-335-0x00007FFD2E160000-0x00007FFD2E1C7000-memory.dmp
memory/4772-334-0x00007FFD2C3A0000-0x00007FFD2C9E1000-memory.dmp
memory/4772-336-0x00007FFD36AC0000-0x00007FFD36AE8000-memory.dmp
memory/4772-286-0x00007FFD36680000-0x00007FFD3674E000-memory.dmp
memory/4772-338-0x00007FFD2B850000-0x00007FFD2BE41000-memory.dmp
memory/4772-339-0x000001FF3C9C0000-0x000001FF3D22A000-memory.dmp
memory/4772-340-0x00007FFD2AFE0000-0x00007FFD2B84A000-memory.dmp
memory/4772-352-0x00007FFD391A0000-0x00007FFD391D3000-memory.dmp
memory/4772-341-0x00007FFD2D710000-0x00007FFD2DD7C000-memory.dmp
memory/4772-351-0x00007FFD2CA60000-0x00007FFD2CF93000-memory.dmp
memory/4772-359-0x00007FFD2B850000-0x00007FFD2BE41000-memory.dmp
memory/4772-356-0x00007FFD2C3A0000-0x00007FFD2C9E1000-memory.dmp
memory/4772-355-0x00007FFD2D470000-0x00007FFD2D702000-memory.dmp
memory/4772-353-0x00007FFD36680000-0x00007FFD3674E000-memory.dmp
memory/4772-357-0x00007FFD36AC0000-0x00007FFD36AE8000-memory.dmp
memory/4772-360-0x00007FFD2AFE0000-0x00007FFD2B84A000-memory.dmp
memory/4772-377-0x00007FFD2C3A0000-0x00007FFD2C9E1000-memory.dmp
memory/4772-380-0x00007FFD2B850000-0x00007FFD2BE41000-memory.dmp
memory/4772-381-0x00007FFD2AFE0000-0x00007FFD2B84A000-memory.dmp
memory/4772-398-0x00007FFD2C3A0000-0x00007FFD2C9E1000-memory.dmp
memory/4772-419-0x00007FFD2C3A0000-0x00007FFD2C9E1000-memory.dmp
memory/4772-423-0x00007FFD2AFE0000-0x00007FFD2B84A000-memory.dmp
memory/4772-440-0x00007FFD2C3A0000-0x00007FFD2C9E1000-memory.dmp
memory/4772-461-0x00007FFD2C3A0000-0x00007FFD2C9E1000-memory.dmp
memory/4772-482-0x00007FFD2C3A0000-0x00007FFD2C9E1000-memory.dmp
memory/4772-485-0x00007FFD2B850000-0x00007FFD2BE41000-memory.dmp
memory/4772-486-0x00007FFD2AFE0000-0x00007FFD2B84A000-memory.dmp
memory/4772-503-0x00007FFD2C3A0000-0x00007FFD2C9E1000-memory.dmp
memory/4772-507-0x00007FFD2AFE0000-0x00007FFD2B84A000-memory.dmp
memory/4772-524-0x00007FFD2C3A0000-0x00007FFD2C9E1000-memory.dmp
memory/4772-528-0x00007FFD2AFE0000-0x00007FFD2B84A000-memory.dmp
memory/4772-548-0x00007FFD2B850000-0x00007FFD2BE41000-memory.dmp
memory/4772-549-0x00007FFD2AFE0000-0x00007FFD2B84A000-memory.dmp
memory/4772-545-0x00007FFD2C3A0000-0x00007FFD2C9E1000-memory.dmp
memory/4772-566-0x00007FFD2C3A0000-0x00007FFD2C9E1000-memory.dmp
memory/4772-570-0x00007FFD2AFE0000-0x00007FFD2B84A000-memory.dmp
memory/4772-587-0x00007FFD2C3A0000-0x00007FFD2C9E1000-memory.dmp
memory/4772-591-0x00007FFD2AFE0000-0x00007FFD2B84A000-memory.dmp
memory/4772-608-0x00007FFD2C3A0000-0x00007FFD2C9E1000-memory.dmp
memory/4772-612-0x00007FFD2AFE0000-0x00007FFD2B84A000-memory.dmp
memory/4772-629-0x00007FFD2C3A0000-0x00007FFD2C9E1000-memory.dmp
memory/4772-633-0x00007FFD2AFE0000-0x00007FFD2B84A000-memory.dmp