Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    01/07/2026, 03:14

General

  • Target
    2026-06-30_b518690317c153e477be60358240d4ca_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
  • Size 10.2MB
  • Sample260701-drd7cafs3x
  • SHA256 44f7960e8156501afcd9a87a0c00961acc542df8d72ee94d5eeceb30d1eb5fba
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 24 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-06-30_b518690317c153e477be60358240d4ca_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-06-30_b518690317c153e477be60358240d4ca_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3460
    • C:\Users\Admin\AppData\Local\Temp\2026-06-30_b518690317c153e477be60358240d4ca_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-06-30_b518690317c153e477be60358240d4ca_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
      2⤵
      • Loads dropped DLL
      PID:4788

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        LIBBZ2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\LIBBZ2.dll
        • Size 81KB
        • SHA256 25a4aae35dd89709620106db311af5bca7c868182b961e106a895ae14d2fc98a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\VCRUNTIME140.dll
        • Size 121KB
        • SHA256 0205071c36c17f1efbd70178c852cb7d49985c484202752b8704b7ac6b184e60
        • MD5 SHA1 SHA512 SSDEEP TLSH

        VCRUNTIME140_1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 963e45edd064545962e216c12d68071ced94dc8e11862a18f07f14eb2690a57c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _asyncio.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\_asyncio.pyd
        • Size 71KB
        • SHA256 82d4558d40e1582c12637c3c29270712d2c3272a985fa06a56ede96a5b8a9c22
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\_bz2.pyd
        • Size 35KB
        • SHA256 667d0a109f432c18b85f0f2c37a3bc382adb9e30a9cc8aa64497832f93a74b99
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ctypes.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\_ctypes.pyd
        • Size 131KB
        • SHA256 da9cd07c70464202cf9507029b7d611dd20a9b1ba1e20db633ca183c422a4e2c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-core-console-l1-1-0.dll
        • Size 21KB
        • SHA256 6df76986aec08e89ea037bc5271caaa82c69bd7eefba4fc293f92de1b1213e5e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-core-datetime-l1-1-0.dll
        • Size 21KB
        • SHA256 c541697c3e9086c6483e88d9cc8fe8a2efc74f663da0b0662babc04d3f79000f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-core-debug-l1-1-0.dll
        • Size 21KB
        • SHA256 fed0c40d172de4de52dc2230c5c92fd6bc8e8553619d5bb5240dcc4f025dc8cf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 21KB
        • SHA256 cdae6e7d24d4ca4b491d483135740cc60f2dfc74dd2e01779e655b9f8f85a337
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-fibers-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-core-fibers-l1-1-0.dll
        • Size 21KB
        • SHA256 cbb6cb7ff25363b07647ea05d01f2881837d50b04bba4debe875a4aa3a307c52
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-core-file-l1-1-0.dll
        • Size 25KB
        • SHA256 02c96dde747ea574fecfb93d43dd9829236a1b22f0eb5513c0e0b27b7bdac934
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-core-file-l1-2-0.dll
        • Size 21KB
        • SHA256 682968c7640a1d55485b7c10dfdaf520b1e1c73a8be267853e80be893be3fb49
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-core-file-l2-1-0.dll
        • Size 21KB
        • SHA256 45a0eb1b83f448054536d3aa628393b7418477897e841c66384ecc7f4f18c2f2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-core-handle-l1-1-0.dll
        • Size 21KB
        • SHA256 9986a39b7f2e067ee7d1f2b3db0b940e2b75900152f099ff41cce8ddd47565e0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-core-heap-l1-1-0.dll
        • Size 21KB
        • SHA256 54b51444c8b6c9342fd20f5a5b0909a906acd0bdc9cf4d70134d5f8cffbe3209
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 21KB
        • SHA256 ff341ef2c2c389d44bbb1c919ff42ec360015985c0dae2ac760ac5acad0cb1d1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 21KB
        • SHA256 6cbc929f814d7e931e0f6f510da1696b059c53bf66934a68d218d3342ce4a289
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-core-localization-l1-2-0.dll
        • Size 21KB
        • SHA256 3ddbcd067d495845b7134f30bcea031ad558df4acb562b2f3190941913227158
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-core-memory-l1-1-0.dll
        • Size 21KB
        • SHA256 bfa2145c3d615540193a41c9f9605018062307e9fcf1665c390f0034178ecb4a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 21KB
        • SHA256 4fcb066de08f48a490e7d50417469ab3099b4a7fe318a8845e4ec9b3e3fd52be
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 21KB
        • SHA256 f3a31997c715dec8a6857d87be217c7acb893839156838ba20b5ef818ad5c9b1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 21KB
        • SHA256 470e9d04a1aa19c6b84b5b10cb055ff55caabe0f45d63090865c196b66c295f5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 21KB
        • SHA256 4e57ceffbc2ef0e4dbfb92854756f97d2b34d9e29db16f46c476ed360b92b1cc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-core-profile-l1-1-0.dll
        • Size 21KB
        • SHA256 0a3a017ca780353d56157682edda4cc3a19a236625fe0f2356faf635cd4f6ace
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 21KB
        • SHA256 243c00a13c8fd6d764ebf22ec5a93492043949616561697b776fe9f62360665b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-core-string-l1-1-0.dll
        • Size 21KB
        • SHA256 be439f71ed591f8f65b8894e84569cf3cc3363d88536e49bdd998e49e069d0e8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-core-synch-l1-1-0.dll
        • Size 21KB
        • SHA256 83e86bee356668319f4115846ed9a571cdb37cd8a0eb036fc2a960bdeafcb526
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-core-synch-l1-2-0.dll
        • Size 21KB
        • SHA256 718bbb66ed24612c40f415ef11f07db287b1bdf0b130667689d1cdce3a1bee29
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 21KB
        • SHA256 8e28db596d46ca22f16d8825bebc9406cd01d5efe4233a2eaa6b450473741766
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-core-timezone-l1-1-0.dll
        • Size 21KB
        • SHA256 b29f3f250eed6d05bc000a1020ca65215838c3733b78293dfca459031df575f8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-core-util-l1-1-0.dll
        • Size 21KB
        • SHA256 4f79b6338f8438e63627b174d5b1bee2d2dcfc40a6119221317fe3f0d8b1e1a0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-crt-conio-l1-1-0.dll
        • Size 21KB
        • SHA256 7320687be8b742cd70ac0e5f1b0a854502063f9b291147785aa7355a38de162d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-crt-convert-l1-1-0.dll
        • Size 25KB
        • SHA256 3550d96592baf95f0be865503d98f47c8c8d4d36b01190589bb7bd08585c739d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-crt-environment-l1-1-0.dll
        • Size 21KB
        • SHA256 167a2b52964458b16aaa166de281e52c35dfe920380c9c7783a06678b665b2ba
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 21KB
        • SHA256 255c9a44ed1106c673821ed4ef165788d6bcc94b2924d0fa1d36af4fc2eb0b9c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-crt-heap-l1-1-0.dll
        • Size 21KB
        • SHA256 dd4be34d6de584a82f12803b1be98afd48bf2f82e87b8cb77141b41ea6393cd5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-crt-locale-l1-1-0.dll
        • Size 21KB
        • SHA256 93fe93380fae70f12ebe85b92e5326321400861167ee0ac858a81d2f7fa37d4b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-crt-math-l1-1-0.dll
        • Size 29KB
        • SHA256 6ea15153e8948e7fc9e0aee7cfc5cb7b9b8f872f94e6714bc510b9bc7291ad9b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-crt-process-l1-1-0.dll
        • Size 21KB
        • SHA256 d92c5cd5e4e3738ac13e28e55de12e6da1ffda6f8e1c7687e0a0b4092c6b3462
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 25KB
        • SHA256 1aec90818ef928b5b6ca252e2ac3ffe4ecc1f169251eba720d0035dcb22ba322
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 25KB
        • SHA256 13328be331666a312d58b6a1b537f8b9ac8922de02e22ddcd0ec84a550e59715
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-crt-string-l1-1-0.dll
        • Size 25KB
        • SHA256 e45dd01a9f6edcf992f3c74c0eb41178851490db9123a4c738497fbf4f73ec0e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-crt-time-l1-1-0.dll
        • Size 21KB
        • SHA256 0cf285ef569249aaa3fb95de1793fc01895f6805ada65d801302f430b62a5153
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\api-ms-win-crt-utility-l1-1-0.dll
        • Size 21KB
        • SHA256 d2a27ff370b4f5c87e5475573d23ee261825a9cd1dd55ee0551a361f61414209
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\base_library.zip
        • Size 1.3MB
        • SHA256 484151d164e9ef35c918cdf588d128cd1f17cca21f47205e5ea68f749813eb37
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ffi.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\ffi.dll
        • Size 39KB
        • SHA256 eb22fc95044ce939910d41857445bd0ecc4fc4d810ba30cc6b5f7f55b48ac8ed
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypto-3-x64.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\libcrypto-3-x64.dll
        • Size 7.0MB
        • SHA256 df58314c3877af3896570cc5645c0922c246ba516463c9f7838edf3812484bbd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libexpat.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\libexpat.dll
        • Size 272KB
        • SHA256 4003857b86144ffcdcb0b3788dba5082e2a33e90cb9be3749c5fe98125eaae55
        • MD5 SHA1 SHA512 SSDEEP TLSH

        liblzma.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\liblzma.dll
        • Size 195KB
        • SHA256 960b67b5188e142ae86e7a3ad0ad417a6c50e7a511b19155ad46061f46d0857f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libssl-3-x64.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\libssl-3-x64.dll
        • Size 1.3MB
        • SHA256 b6e04ada0ae30ec7af8dd4c73f0eedf691a9a84e4749459a5896270ca9e3370d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pyexpat.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\pyexpat.pyd
        • Size 68KB
        • SHA256 00691bc62910b94386f8b6608bdc5b6859babe1fd6986e5f78cb207cd11317ae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python312.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\python312.dll
        • Size 7.1MB
        • SHA256 72c1bea78e0c49f746889a3af8c4973e044e50e319c1c976dd98059a403404da
        • MD5 SHA1 SHA512 SSDEEP TLSH

        select.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\select.pyd
        • Size 30KB
        • SHA256 9b2db44d96870efb13a0bf1013b7863bf3c9fe823cf55928afdd797440257fb5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ucrtbase.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\ucrtbase.dll
        • Size 1.1MB
        • SHA256 fbed69a52fdcf571dd37fe4cc63cb86ed3732b5b998807f14968788027c00754
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unicodedata.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\unicodedata.pyd
        • Size 1.1MB
        • SHA256 046ea71130dcc8f9da1a37f9acd0c9c4b2b67f608457f1e254a959b921694fbe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zlib.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34602\zlib.dll
        • Size 98KB
        • SHA256 bb5e7e442c70bdfa2d3c45c9620835ecc5e98191bde2bc226b4d799a09ad30b3
        • MD5 SHA1 SHA512 SSDEEP TLSH