Overview

overview

10

Static

static

10

2026-07-04...oa.exe

windows10-2004-x64

7

2026-07-04...oa.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    150s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260630-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260630-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    04/07/2026, 18:06

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-04_937617a0af77ee91488810e2032b7ed7_blankgrabber_cobalt-strike_coinminer_glassworm_hijackloa.exe
  • Size 52.7MB
  • Sample260704-wpv17abs3w
  • SHA256 3aaeb2e3e7e7faab7ef28413e9b435b1ca78c3054048d5dfc79e8ecba824c4f5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 20 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-04_937617a0af77ee91488810e2032b7ed7_blankgrabber_cobalt-strike_coinminer_glassworm_hijackloa.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-04_937617a0af77ee91488810e2032b7ed7_blankgrabber_cobalt-strike_coinminer_glassworm_hijackloa.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2792
    • C:\Users\Admin\AppData\Local\Temp\2026-07-04_937617a0af77ee91488810e2032b7ed7_blankgrabber_cobalt-strike_coinminer_glassworm_hijackloa.exe
      C:\Users\Admin\AppData\Local\Temp\2026-07-04_937617a0af77ee91488810e2032b7ed7_blankgrabber_cobalt-strike_coinminer_glassworm_hijackloa.exe
      2⤵
      • Loads dropped DLL
      PID:3848

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        _imaging.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\PIL\_imaging.pyd
        • Size 2.4MB
        • SHA256 03c6629b37d514770d33bfeb1c02179e50779ae67587310310a96b2de5e7142a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 02c6aa0e6e624411a9f19b0360a7865ab15908e26024510e5c38a9c08362c35a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 7dd9aa02e271c68ca6d5f18d651d23a15d7259715af43326578f7dde27f37637
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\_bz2.pyd
        • Size 23KB
        • SHA256 0d4ad1e46a20fde685b469fd0f0892d07212478e16e99ac2959d30667c25fc3e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\_ctypes.pyd
        • Size 119KB
        • SHA256 e5e233eb8b7d8a03fd1ab2dc838178cb26ee3b78eff749d79f3371fc5f93954f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\_lzma.pyd
        • Size 36KB
        • SHA256 2d140d65528003fbadaf1356de62359fd9fc17c9225057f77e212b23ea661a6f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\_socket.pyd
        • Size 71KB
        • SHA256 b831026c5e4f44179d98b83dca4b8c85416dc6da2822f22cce6d1438d28a2d33
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _tkinter.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\_tkinter.pyd
        • Size 51KB
        • SHA256 abc388f10511bba9c1620f07686b9091fc7d19b3dbd56128cc4ba6940ec0cfa2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _wmi.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\_wmi.pyd
        • Size 24KB
        • SHA256 e5b2ea52d69f8253558dd339bdd0cf3c021501144f5a3fa6e3cc7448ef73ef03
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        blue.json
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\customtkinter\assets\themes\blue.json
        • Size 4KB
        • SHA256 c9417470c16ced7a43d6c4a8e027afa6edc62c24d5aee7c4c2dcd11385964d3b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\ffi-8.dll
        • Size 39KB
        • SHA256 ac70bc5452602c2df5eacbdab082d44650117d5729808bd48db2400b89de132a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        launcher.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\launcher.dll
        • Size 16.8MB
        • SHA256 3c18e88123651b4366ba5e147b9a5ffa56aab270f44d1eade4bd2178ff91b703
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libbz2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\libbz2.dll
        • Size 81KB
        • SHA256 25a4aae35dd89709620106db311af5bca7c868182b961e106a895ae14d2fc98a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        liblzma.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\liblzma.dll
        • Size 193KB
        • SHA256 b8cf9fe6d3eaaff6fcebce37947660297762f2f4dde503f7f56ce6475c439abd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python312.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\python312.dll
        • Size 7.0MB
        • SHA256 751866bc6242ef67ec3e8623dbc45d2522061746952132b1e20632bc78aec9a8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\select.pyd
        • Size 18KB
        • SHA256 6e57c296fcd50a0a2121f98e9a433317ed885d0fed03e9e93cf03dbb6bdcda9b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tcl86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\tcl86t.dll
        • Size 1.8MB
        • SHA256 aaa0445afe3ab50b473e546b4ab3df4557c4d2a24a4b497bba84ac1cf0934c63
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msgcat-1.6.1.tm
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\tcl8\8.5\msgcat-1.6.1.tm
        • Size 33KB
        • SHA256 c29589596069ef698f1394262d019f5708a05a5211d8feceaa4c3ab74f5d7d9a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        auto.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\tcl\auto.tcl
        • Size 20KB
        • SHA256 2302234f123a10fef315aa50893bd349bc52201fa12f6dc7bc09fdfc8e84bf85
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cp1252.enc
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\tcl\encoding\cp1252.enc
        • Size 1KB
        • SHA256 14df3ae30e81e7620be6bbb7a9e42083af1ae04d94cf1203565f8a3c0542ace0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pkgIndex.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\tcl\http1.0\pkgIndex.tcl
        • Size 735B
        • SHA256 420c4b3088c9dacd21bc348011cac61d7cb283b9bee78ae72eed764ab094651c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        init.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\tcl\init.tcl
        • Size 24KB
        • SHA256 374e8e83d501dc0283d4b6cae60d96b46141048e5a57d1500dd379f966879f98
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pkgIndex.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\tcl\opt0.4\pkgIndex.tcl
        • Size 608B
        • SHA256 bc4aff8132402e6244f497b3f849b6b30c328db8512a04e4c86c523a80f2fe68
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        package.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\tcl\package.tcl
        • Size 22KB
        • SHA256 9edf9783fe26c85040dc849b7aed8350becb25144b6b2ce6068f58cfdf574f4a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tclIndex
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\tcl\tclIndex
        • Size 5KB
        • SHA256 f832bc13238565d1427c463fdcacef0a93f4dc0352c0e3f35b573d9b11deaca5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tm.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\tcl\tm.tcl
        • Size 11KB
        • SHA256 78e0d5fb77e51be0c99cdfdfef596c91b66ba1160c46c48a63266611bbcf26ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tk86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\tk86t.dll
        • Size 1.5MB
        • SHA256 a834c088405f485d50e4c0f03421941efdea728dd54ffeee5c06d7d367c0a632
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        button.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\tk\button.tcl
        • Size 20KB
        • SHA256 2f013b643d62f08ddaaa1dea39ff80d6607569c9e1acc19406377b64d75ccf53
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        entry.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\tk\entry.tcl
        • Size 17KB
        • SHA256 92fb2fe5b22cc697f9396d3681cf3d31c03598d7d8d1858b4b7ab976e9c80a5c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        icons.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\tk\icons.tcl
        • Size 10KB
        • SHA256 4cab80ace4104a4169c9bd1fdb24d697889b984b91a290b69a481912c38a9fd4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        listbox.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\tk\listbox.tcl
        • Size 14KB
        • SHA256 fdfd4cf3102d83bad3556d0e0086b5f320f74484babf90421cf526fd8b9fbeb0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        menu.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\tk\menu.tcl
        • Size 37KB
        • SHA256 39e93a2bd75b9156235f3271ea02fd7cac82b542ae56df733cd7bd62a2c4207e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        panedwindow.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\tk\panedwindow.tcl
        • Size 5KB
        • SHA256 4adf738b17691489c71c4b9d9a64b12961ada8667b81856f7adbc61dffeadf29
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pkgIndex.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\tk\pkgIndex.tcl
        • Size 376B
        • SHA256 1390f260ea7af5b0779549fa29615530ff9e3bc202806d2024ac644b1fac5dbc
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        scale.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\tk\scale.tcl
        • Size 8KB
        • SHA256 423546933269faec913001f2bce30bbdbce3927dc9dd96fe74813e7ffb27cfb5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        scrlbar.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\tk\scrlbar.tcl
        • Size 12KB
        • SHA256 189e7ee4b67861001c714a55880db34acf7d626a816e18b04b232af9e6e33e81
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spinbox.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\tk\spinbox.tcl
        • Size 15KB
        • SHA256 a804c83029e04e6bd34d335260f388890d7657deb544173858bd05018d73ab01
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        text.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\tk\text.tcl
        • Size 33KB
        • SHA256 fd12bca3c7dcedf3fc6640902af1c9f48bc5df27c9153edaec15413f1581e4a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tk.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\tk\tk.tcl
        • Size 23KB
        • SHA256 779ce7099675d1fcdaa8a53df58cf5b2da6d5f03cdbf7a8c318860bd01a6e46f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        button.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\tk\ttk\button.tcl
        • Size 2KB
        • SHA256 684ed40a9609ca275ce6f3e547fbf2980e3c040faddaf0fd39b7cbd7d5987366
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        cursors.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\tk\ttk\cursors.tcl
        • Size 4KB
        • SHA256 c1db93eaf482bee1bf57cb423f28a8c6770ced9b37ebbb8c9fc86d61215fe8e8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fonts.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\tk\ttk\fonts.tcl
        • Size 5KB
        • SHA256 1f2d2965b2c72ae953c0829a227577ada8959d24502638b3186aa840b678cc3a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        menubutton.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\tk\ttk\menubutton.tcl
        • Size 6KB
        • SHA256 a16dfb1eaf77b05a0ef92b4cc7d00f559fb6cf0b2f735c3afac50303c524a081
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ttk.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\tk\ttk\ttk.tcl
        • Size 4KB
        • SHA256 2d5892078ea331e7f967f46ab510f13e890c9ee185d597d9fb3bc4c29e400ecf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        utils.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\tk\ttk\utils.tcl
        • Size 8KB
        • SHA256 d17c13d2d163a1bff6987f751220cf3dcf0d466cc6c52a8e2cc6219c21629e14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zlib.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_2792_366391_KoWkJmLQcnw\zlib.dll
        • Size 87KB
        • SHA256 a1dcb9b391cdfa3700b739c89a1214745159a96615d75040010d3461497da609
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download