Overview

overview

7

Static

static

3

2026-06-26...at.exe

windows10-2004-x64

7

2026-06-26...at.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    166s
  • max time network
    124s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260618-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    29/06/2026, 11:33

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-06-26_e3c6685f9df79ae3f9222a3319eadc54_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
  • Size 93.1MB
  • Sample260629-nn71csdy9p
  • SHA256 3720aeb01bcd6ab928200c98c485b78a03d498f1e3a21f79983c3c0035b4c428
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 41 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-06-26_e3c6685f9df79ae3f9222a3319eadc54_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-06-26_e3c6685f9df79ae3f9222a3319eadc54_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4792
    • C:\Users\Admin\AppData\Local\Temp\2026-06-26_e3c6685f9df79ae3f9222a3319eadc54_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-06-26_e3c6685f9df79ae3f9222a3319eadc54_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:4704
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "ver"
        3⤵
          PID:2788

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          81d243bd2c585b0f4821__mypyc.cp310-win_amd64.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\81d243bd2c585b0f4821__mypyc.cp310-win_amd64.pyd
          • Size 190KB
          • SHA256 58d2aaf44000a53cbe9bc72a639716b6270b97461fe151daa663047452bb4193
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          VCRUNTIME140.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\VCRUNTIME140.dll
          • Size 94KB
          • SHA256 ded5adaa94341e6c62aea03845762591666381dca30eb7c17261dd154121b83e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _asyncio.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\_asyncio.pyd
          • Size 59KB
          • SHA256 3ea0d07f4a434c172655e6e8012339486368d355c542606bc1bcbe0cabd7f874
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _bz2.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\_bz2.pyd
          • Size 78KB
          • SHA256 4b1d29f19adaf856727fa4a1f50eee0a86c893038dfba2e52f26c11ab5b3672f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _cffi_backend.cp310-win_amd64.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\_cffi_backend.cp310-win_amd64.pyd
          • Size 175KB
          • SHA256 c379126647af2cbfb592d6a921f6218da59b886e2a56e9b82f8159aced6f1100
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _ctypes.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\_ctypes.pyd
          • Size 116KB
          • SHA256 e3b69285f27a8ad97555bebea29628a93333de203ee2fae95b73b6b6d6c162b1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _lzma.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\_lzma.pyd
          • Size 149KB
          • SHA256 2e3fd65c4e02c99a61344ce59e09ec7fde74c671db5f82a891732e1140910f20
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-console-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-core-console-l1-1-0.dll
          • Size 18KB
          • SHA256 9f3608c15c5de2f577a2220ce124b530825717d778f1e3941e536a3ab691f733
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-datetime-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-core-datetime-l1-1-0.dll
          • Size 18KB
          • SHA256 3b68d7ab0641de6b3e81d209b7c0d3896e4ffa76617bbadd01eb54036cdd1b07
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-debug-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-core-debug-l1-1-0.dll
          • Size 18KB
          • SHA256 55574f9e80d313048c245acefd21801d0d6c908a8a5049b4c46253efaf420f89
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-errorhandling-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-core-errorhandling-l1-1-0.dll
          • Size 18KB
          • SHA256 b3715112a7ca4c6cc0efee044bd82444d3267a379e33a3ec118d87e75604204d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-file-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-core-file-l1-1-0.dll
          • Size 21KB
          • SHA256 56de091efe467fe23cc989c1ee21f3249a1bdb2178b51511e3bd514df12c5ccb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-file-l1-2-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-core-file-l1-2-0.dll
          • Size 18KB
          • SHA256 322d963d2a2aefd784e99697c59d494853d69bed8efd4b445f59292930a6b165
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-file-l2-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-core-file-l2-1-0.dll
          • Size 18KB
          • SHA256 1ea267a2e6284f17dd548c6f2285e19f7edb15d6e737a55391140ce5cb95225e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-handle-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-core-handle-l1-1-0.dll
          • Size 18KB
          • SHA256 8ee2de377a045c52bbb05087ae3c2f95576edfb0c2767f40b13454f2d9f779de
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-heap-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-core-heap-l1-1-0.dll
          • Size 18KB
          • SHA256 87a5c5475e9c26fabfead6802dac8a62e2807e50e0d18c4bfadcb15ebf5bcbc0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-interlocked-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-core-interlocked-l1-1-0.dll
          • Size 18KB
          • SHA256 5cd00ff4731691f81ff528c4b5a2e408548107efc22cc6576048b0fdce3dfbc9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-libraryloader-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-core-libraryloader-l1-1-0.dll
          • Size 19KB
          • SHA256 8e01eb923fc453f927a7eca1c8aa5643e43b360c76b648088f51b31488970aa0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-localization-l1-2-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-core-localization-l1-2-0.dll
          • Size 20KB
          • SHA256 a07cc878ab5595aacd4ab229a6794513f897bd7ad14bcec353793379146b2094
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-memory-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-core-memory-l1-1-0.dll
          • Size 18KB
          • SHA256 c2e887a17875d39099d662a42f58c120b9cc8a799afd87a9e49adf3faddd2b68
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-namedpipe-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-core-namedpipe-l1-1-0.dll
          • Size 18KB
          • SHA256 593fa2aa2474508ad942bbaa0fdc9a1badd81c85b0dff1c43b90a47c23ad5fb7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-processenvironment-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-core-processenvironment-l1-1-0.dll
          • Size 19KB
          • SHA256 ea2972fec12305825162ae3e1ae2b6c140e840be0e7ebb51a7a77b7feeda133a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-processthreads-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-core-processthreads-l1-1-0.dll
          • Size 20KB
          • SHA256 a1221836731c7e52c42d5809cc02b17c5ec964601631ec15a84201f423da4ac4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-processthreads-l1-1-1.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-core-processthreads-l1-1-1.dll
          • Size 18KB
          • SHA256 fe760614903e6d46a1be508dccb65cf6929d792a1db2c365fc937f2a8a240504
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-profile-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-core-profile-l1-1-0.dll
          • Size 17KB
          • SHA256 9e98b03a3ca1ebabdceb7ed9c0ceb4912bb68eb68f3e0df17f39c7a55fada31d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-rtlsupport-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-core-rtlsupport-l1-1-0.dll
          • Size 18KB
          • SHA256 cdc4cfebf9cba85b0d3979befdb258c1f2cfcb79edd00da2dfbf389d080e4379
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-string-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-core-string-l1-1-0.dll
          • Size 18KB
          • SHA256 854db7d2085caacf83d6616761d8bdcbacb54a06c9a9b171b1c1a15e7dc10908
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-synch-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-core-synch-l1-1-0.dll
          • Size 20KB
          • SHA256 50a1542d16b42ecb3edc1edd0881744171ea52f7155e5269ad39234f0ea691de
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-synch-l1-2-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-core-synch-l1-2-0.dll
          • Size 18KB
          • SHA256 59c14541107f5f2b94bbf8686efee862d20114bcc9828d279de7bf664d721132
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-sysinfo-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-core-sysinfo-l1-1-0.dll
          • Size 19KB
          • SHA256 8310d855398f83cb5b9ca3adeb358da1354557aec5c82c8ef91a29f79a47f620
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-timezone-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-core-timezone-l1-1-0.dll
          • Size 18KB
          • SHA256 48eb5b52227b6fb5be70cb34009c8da68356b62f3e707db56af957338ba82720
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-core-util-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-core-util-l1-1-0.dll
          • Size 18KB
          • SHA256 a41bede183fa1c70318332d6bc54ef13817aeee6d52b3ab408f95fa532b809f1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-conio-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-crt-conio-l1-1-0.dll
          • Size 19KB
          • SHA256 d5960c7356e8ab97d0ad77738e18c80433da277671a6e89a943c7f7257ff3663
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-convert-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-crt-convert-l1-1-0.dll
          • Size 22KB
          • SHA256 83678f181f46fe77f8afe08bfc48aebb0b4154ad45b2efe9bfadc907313f6087
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-environment-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-crt-environment-l1-1-0.dll
          • Size 18KB
          • SHA256 f7c6c7ea22edd2f8bd07aa5b33cbce862ef1dcdc2226eb130e0018e02ff91dc1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-filesystem-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-crt-filesystem-l1-1-0.dll
          • Size 20KB
          • SHA256 610332203d29ab218359e291401bf091bb1db1a6d7ed98ab9a7a9942384b8e27
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-heap-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-crt-heap-l1-1-0.dll
          • Size 19KB
          • SHA256 af47aebe065af2f045a19f20ec7e54a6e73c0c3e9a5108a63095a7232b75381a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-locale-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-crt-locale-l1-1-0.dll
          • Size 18KB
          • SHA256 b3b6ee98aca14cf5bc9f3bc7897bc23934bf85fc4bc25b7506fe4cd9a767047a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-math-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-crt-math-l1-1-0.dll
          • Size 27KB
          • SHA256 a25d0654deb0cea1aef189ba2174d0f13bdf52f098d3a9ec36d15e4bfb30c499
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-process-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-crt-process-l1-1-0.dll
          • Size 19KB
          • SHA256 fc50a37acc35345c99344042d7212a4ae88aa52a894cda3dcb9f6db46d852558
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-runtime-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-crt-runtime-l1-1-0.dll
          • Size 22KB
          • SHA256 371a44ab91614a8c26d159beb872a7b43f569cb5fac8ada99ace98f264a3b503
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-stdio-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-crt-stdio-l1-1-0.dll
          • Size 24KB
          • SHA256 0189cbd84dea035763a7e52225e0f1a7dcec402734885413add324bffe688577
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-string-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-crt-string-l1-1-0.dll
          • Size 24KB
          • SHA256 885309eb86dccd8e234ba05e13fe0bf59ab3db388ebfbf6b4fd6162d8e287e82
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-time-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-crt-time-l1-1-0.dll
          • Size 20KB
          • SHA256 00ac02d39b7b16406850e02ca4a6101f45d6f7b4397cc9e069f2ce800b8500b9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          api-ms-win-crt-utility-l1-1-0.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\api-ms-win-crt-utility-l1-1-0.dll
          • Size 18KB
          • SHA256 984306a3547be2f48483d68d0466b21dda9db4be304bedc9ffdb953c26cac5a1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          base_library.zip
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\base_library.zip
          • Size 858KB
          • SHA256 5668ad554a386f6291fa3472f0feb3a64108c5b3fab654bcc764dd2e63dadac7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libcrypto-1_1.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\libcrypto-1_1.dll
          • Size 3.3MB
          • SHA256 664c3e52f914e351bb8a66ce2465ee0d40acab1d2a6b3167ae6acf6f1d1724d2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libffi-7.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\libffi-7.dll
          • Size 32KB
          • SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libssl-1_1.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\libssl-1_1.dll
          • Size 678KB
          • SHA256 b7c0e42c1a60a2a062b899c8d4ebd0c50ef956177ba21785ce07c517c143aeaf
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          pyexpat.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\pyexpat.pyd
          • Size 187KB
          • SHA256 66b14ebdd917f046315b666f841ea54a32760ecd624863071da8d3f1fd24459b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          python3.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\python3.dll
          • Size 60KB
          • SHA256 ec655cc34819d6a9677c0541fd7e7b2b8a92804e8bf73aee692a9c44d1a24b5d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          python310.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\python310.dll
          • Size 4.3MB
          • SHA256 34f0e44a0d089587e1ea48c1cc4c3164a1819c6db27a7c1b746af46d6388c26e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          select.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\select.pyd
          • Size 24KB
          • SHA256 b9ef1709ed4cd0fd72e4c4ba9b7702cb79d1619c11554ea06277f3dac21bd010
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ucrtbase.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\ucrtbase.dll
          • Size 992KB
          • SHA256 8a91052ef261b5fbf3223ae9ce789af73dfe1e9b0ba5bdbc4d564870a24f2bae
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          unicodedata.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI47922\unicodedata.pyd
          • Size 1.1MB
          • SHA256 89c93a672b649cd1e296499333df5b3d9ba2fd28f9280233b56441c69c126631
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download