Overview

overview

7

Static

static

3

2026-07-07...at.exe

windows10-2004-x64

7

2026-07-07...at.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    122s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260706-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    07/07/2026, 18:11

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-07_6233fefebda7b19ca3693142ef3a4872_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
  • Size 18.5MB
  • Sample260707-wstyasbw2z
  • SHA256 37b994dbafe6770e67bf487aec9c8e9f56c857120ee567be43755259aea9142d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 45 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-07_6233fefebda7b19ca3693142ef3a4872_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-07_6233fefebda7b19ca3693142ef3a4872_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5384
    • C:\Users\Admin\AppData\Local\Temp\2026-07-07_6233fefebda7b19ca3693142ef3a4872_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-07-07_6233fefebda7b19ca3693142ef3a4872_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of WriteProcessMemory
      PID:2576
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "title WinRT"
        3⤵
          PID:2148
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /c "cmd.exe"
          3⤵
          • Suspicious use of WriteProcessMemory
          PID:704
          • C:\Windows\system32\cmd.exe
            cmd.exe
            4⤵
              PID:4508

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            Config.cp312-win_amd64.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\Models\Client\Config.cp312-win_amd64.pyd
            • Size 101KB
            • SHA256 a6fd1a5738e11c7993d8365a2ddfa85bbab24bcf2fdcae36f4e64c13c9619716
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            __init__.cp312-win_amd64.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\Models\Client\__init__.cp312-win_amd64.pyd
            • Size 17KB
            • SHA256 c28685c012b15c1c5b20499ca199baa17cdd1baed7aa90dc5c2f3fe6a258c132
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Encryption.cp312-win_amd64.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\Models\Encryption.cp312-win_amd64.pyd
            • Size 49KB
            • SHA256 4df460b2040e24021cfbb053c09c08bd940e79c8b27c879b9b9ace05ace80fbe
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Jocks.cp312-win_amd64.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\Models\Jocks.cp312-win_amd64.pyd
            • Size 78KB
            • SHA256 caea863c691f2f5e86a49f1e2f0673d7ee8ca597898355f9190a13227f0ca3fc
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            MachineCode.cp312-win_amd64.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\Models\MachineCode.cp312-win_amd64.pyd
            • Size 35KB
            • SHA256 08d0e990658a6abe5a5bfa5334e1d0da7f5ef3606d639e155f7c20b83aeb1f35
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ProcessLevel.cp312-win_amd64.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\Models\ProcessLevel.cp312-win_amd64.pyd
            • Size 48KB
            • SHA256 7598bad77f7d808fb21c5869a7e6428e1377184315942a5d3a59f262c172c0b6
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Verify_Crt.cp312-win_amd64.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\Models\Verify_Crt.cp312-win_amd64.pyd
            • Size 74KB
            • SHA256 2d6c943144fc57502feec92a5d0ec997373edb0d397e37be716147802e5e5eb2
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            __init__.cp312-win_amd64.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\Models\__init__.cp312-win_amd64.pyd
            • Size 17KB
            • SHA256 a3caf772b4b26f7609b4364a0bda228ec84c57a08f733b595e618d14547d62f3
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            loger.cp312-win_amd64.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\Models\loger.cp312-win_amd64.pyd
            • Size 40KB
            • SHA256 1359abaa90a440f34ba200effc3bf720b52fd8391b24dc9ce596cfe9716c4c6b
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            VCRUNTIME140.dll
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\VCRUNTIME140.dll
            • Size 117KB
            • SHA256 36585912e5eaf83ba9fea0631534f690ccdc2d7ba91537166fe53e56c221e153
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            VCRUNTIME140_1.dll
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\VCRUNTIME140_1.dll
            • Size 48KB
            • SHA256 82a2f9ae1e6146ae3cb0f4bc5a62b7227e0384209d9b1aef86bbcc105912f7cd
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            _bz2.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\_bz2.pyd
            • Size 84KB
            • SHA256 178c6eeb30843e656cc407aaf53ae6d0f170966e4e0bdd2ee1bede73962275cd
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            _cffi_backend.cp312-win_amd64.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\_cffi_backend.cp312-win_amd64.pyd
            • Size 177KB
            • SHA256 53de34afc3939d81bf2498b77425c52e2c3f3164f8cfe2543d3acc8f24134488
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            _ctypes.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\_ctypes.pyd
            • Size 124KB
            • SHA256 9ffdedd0f1f09f21870bd75c08d05c32994a1193be3955e367f260690a36cbd0
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            _hashlib.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\_hashlib.pyd
            • Size 65KB
            • SHA256 823717926adce6b36f9c13b6555eaeaf5714c4756828f11cffc1ce0bef970a7e
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            _lzma.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\_lzma.pyd
            • Size 156KB
            • SHA256 f6e0c786395ccc7b22f4c435b19f7073eb5974eb29e09f4c91060cab10450e6a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            _socket.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\_socket.pyd
            • Size 83KB
            • SHA256 0e2c1089974a2757426dac3295201a33c990c36f3c09593f8a2b6e07fd36b99c
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            _ssl.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\_ssl.pyd
            • Size 175KB
            • SHA256 81344e3e16cf6f2d5b24cc0cf92e95c5fd0592e4a3859bb00c3f5891e2482128
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            base_library.zip
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\base_library.zip
            • Size 1.3MB
            • SHA256 8b529fedd7f8b59c5b93fa36c5dd6d7517d24ad9f6ef9c70eaa6b4163cf0eb31
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            _rust.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\cryptography\hazmat\bindings\_rust.pyd
            • Size 7.9MB
            • SHA256 9aab0bd7321bf03b7d832add76b6b31d6ba580840505b03c23c7773669e67247
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            libcrypto-3.dll
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\libcrypto-3.dll
            • Size 5.0MB
            • SHA256 4e5d5d20d6d31e72ab341c81e97b89e514326c4c861b48638243bdf0918cfa43
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            libffi-8.dll
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\libffi-8.dll
            • Size 38KB
            • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            libssl-3.dll
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\libssl-3.dll
            • Size 774KB
            • SHA256 2e4d35b681a172d3298caf7dc670451be7a8ba27c26446efc67470742497a950
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            python3.DLL
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\python3.DLL
            • Size 68KB
            • SHA256 7c3e2956271eff4949145d14635c0ca659db5ed19215201d2d8b3a4a3d3006f9
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            python312.dll
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\python312.dll
            • Size 6.6MB
            • SHA256 3b56fa10d3797c231468cee42caeaaaff40dbede7bc0d142ec4878493f48e07d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            pythoncom312.dll
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\pywin32_system32\pythoncom312.dll
            • Size 674KB
            • SHA256 97b7258c32a555170e658d843f8e64a24bb0e087cca2183fc521084d35a08f8a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            pywintypes312.dll
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\pywin32_system32\pywintypes312.dll
            • Size 133KB
            • SHA256 b29e4098f9f53f05e3281636d079de58b05a26c03669cea4ec1673e51750fa31
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            select.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\select.pyd
            • Size 32KB
            • SHA256 fcac4646ff709ac07aee532c4612a19b7070f2dd6ef67ba09c743644e92f7376
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            win32api.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\win32\win32api.pyd
            • Size 132KB
            • SHA256 b54d63d771b4db2a1bf1e724ff2597e970173ec5a9860c2b0dfdff83cd7a160e
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            win32event.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\win32\win32event.pyd
            • Size 28KB
            • SHA256 c64500261bb9bfeffa3ab5ed03af3a57dc52a959022d727a9fec9a0389672013
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            win32process.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\win32\win32process.pyd
            • Size 53KB
            • SHA256 8be089daba4819c30967307261f9c12fe4d7eccc4f01ad5a8b88ce07138d885a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            win32security.pyd
            • Path C:\Users\Admin\AppData\Local\Temp\_MEI53842\win32\win32security.pyd
            • Size 134KB
            • SHA256 4545b3c959e274a46c3d242a3b77c057d59033c657c4fa3b0b00d0a62d9b6c0f
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download