Overview

overview

7

Static

static

3

2026-07-11...at.exe

windows10-2004-x64

7

2026-07-11...at.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    114s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    11/07/2026, 04:25

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-11_84704d8ccae6f6ec78bce1a7fe29cb3f_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
  • Size 11.9MB
  • Sample260711-e12vfadx51
  • SHA256 096b9f7c26c75d2e3a0688e31953333ed67b9d0d95b2d43731d0aeb69af8938b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 24 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-11_84704d8ccae6f6ec78bce1a7fe29cb3f_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-11_84704d8ccae6f6ec78bce1a7fe29cb3f_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3448
    • C:\Users\Admin\AppData\Local\Temp\2026-07-11_84704d8ccae6f6ec78bce1a7fe29cb3f_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-07-11_84704d8ccae6f6ec78bce1a7fe29cb3f_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of WriteProcessMemory
      PID:5488
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "ver"
        3⤵
          PID:1304

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          _imaging.cp39-win_amd64.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\PIL\_imaging.cp39-win_amd64.pyd
          • Size 2.4MB
          • SHA256 ca20500a24f28e2a6e97213d484dbe4c0ab12c52f2dadfe8637b2d725d2f5846
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          VCRUNTIME140.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\VCRUNTIME140.dll
          • Size 94KB
          • SHA256 c865c3366a98431ec3a5959cb5ac3966081a43b82dfcd8bfefafe0146b1508db
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          VCRUNTIME140_1.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\VCRUNTIME140_1.dll
          • Size 36KB
          • SHA256 6c1e531c25ab2934a4ea9970598bc751d924d7cc5650df3e1282b61d6cd24f42
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _bz2.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\_bz2.pyd
          • Size 84KB
          • SHA256 7301fc2447e7e6d599472d2c52116fbe318a9ff9259b8a85981c419bfd20e3ef
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _ctypes.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\_ctypes.pyd
          • Size 124KB
          • SHA256 4fcf4c9c98b75a07a7779c52e1f7dff715ae8a2f8a34574e9dac66243fb86763
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _decimal.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\_decimal.pyd
          • Size 264KB
          • SHA256 0809de4a8dee3b6cf6ddc40a10c52d53867ee47bf5a6769d16027f2ab766b5cf
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _elementtree.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\_elementtree.pyd
          • Size 175KB
          • SHA256 cf6cf027ce531f2ae4ba9f80e360396452839287e240290d2ac9c9a0bc06d821
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _hashlib.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\_hashlib.pyd
          • Size 64KB
          • SHA256 e7aecb61a54dcc77b6d9cafe9a51fd1f8d78b2194cc3baf6304bbd1edfd0aee6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _lzma.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\_lzma.pyd
          • Size 159KB
          • SHA256 638cd8c336f90629a6260e67827833143939497d542838846f4fc94b2475bb3e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _socket.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\_socket.pyd
          • Size 78KB
          • SHA256 fdb14859efee35e105f21a64f7afdf50c399ffa0fa8b7fcc76dae4b345d946cb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _ssl.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\_ssl.pyd
          • Size 151KB
          • SHA256 3d183c1b3a24d634387cce3835f58b8e1322bf96ab03f9fe9f02658fb17d1f8c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          auto.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\_tcl_data\auto.tcl
          • Size 20KB
          • SHA256 f385515658832feb75ee4dce5bd53f7f67f2629077b7d049b86a730a49bd0840
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          cp1252.enc
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\_tcl_data\encoding\cp1252.enc
          • Size 1KB
          • SHA256 14df3ae30e81e7620be6bbb7a9e42083af1ae04d94cf1203565f8a3c0542ace0
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          pkgIndex.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\_tcl_data\http1.0\pkgIndex.tcl
          • Size 735B
          • SHA256 420c4b3088c9dacd21bc348011cac61d7cb283b9bee78ae72eed764ab094651c
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          init.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\_tcl_data\init.tcl
          • Size 23KB
          • SHA256 bc492b19308bc011cfcd321f1e6e65e6239d4eeb620cc02f7e9bf89002511d4a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          pkgIndex.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\_tcl_data\opt0.4\pkgIndex.tcl
          • Size 607B
          • SHA256 eb9925a8f0fcc7c2a1113968ab0537180e10c9187b139c8371adf821c7b56718
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          package.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\_tcl_data\package.tcl
          • Size 22KB
          • SHA256 47b6af117199b1511f6103ec966a58e2fd41f0aba775c44692b2069f6ed10bad
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          tclIndex
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\_tcl_data\tclIndex
          • Size 5KB
          • SHA256 abf7d9d1e86de931096c21820bfa4fd70db1f55005d2db4aa674d86200867806
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          tm.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\_tcl_data\tm.tcl
          • Size 11KB
          • SHA256 6437bd7040206d3f2db734fa482b6e79c68bcc950fba80c544c7f390ba158f9b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          button.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\_tk_data\button.tcl
          • Size 20KB
          • SHA256 0d95949cfacf0df135a851f7330acc9480b965dac7361151ac67a6c667c6276d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          entry.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\_tk_data\entry.tcl
          • Size 16KB
          • SHA256 8f57a23c5190b50fad00bdee9430a615ebebfc47843e702374ae21beb2ad8b06
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          icons.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\_tk_data\icons.tcl
          • Size 10KB
          • SHA256 a78388d68600331d06bb14a4289bc1a46295f48cec31ceff5ae783846ea4d161
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          listbox.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\_tk_data\listbox.tcl
          • Size 14KB
          • SHA256 39721233855e97bfa508959b6dd91e1924456e381d36fdfc845e589d82b1b0cc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          menu.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\_tk_data\menu.tcl
          • Size 37KB
          • SHA256 564ac0040176cc5744e3860abc36b5ffbc648da20b26a710dc3414eae487299b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          panedwindow.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\_tk_data\panedwindow.tcl
          • Size 5KB
          • SHA256 4adf738b17691489c71c4b9d9a64b12961ada8667b81856f7adbc61dffeadf29
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          pkgIndex.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\_tk_data\pkgIndex.tcl
          • Size 363B
          • SHA256 cd44ee7f76c37c0c522bd0cfca41c38cdeddc74392b2191a3af1a63d9d18888e
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          tk.tcl
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\_tk_data\tk.tcl
          • Size 22KB
          • SHA256 e1067a0668debb2d8e8ec3b7bc1aec3723627649832b20333f9369f28e4dfdbf
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _tkinter.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\_tkinter.pyd
          • Size 64KB
          • SHA256 1b4d93153d06bcdbff02ce3a68f6a620ccbe4ba163baf78698d5fba3f54d4357
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          base_library.zip
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\base_library.zip
          • Size 827KB
          • SHA256 ae9cddf44dde128b4c622f87a20d8edeec001bc2a619e26513749c49093c6bbc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          blue.json
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\customtkinter\assets\themes\blue.json
          • Size 4KB
          • SHA256 c9417470c16ced7a43d6c4a8e027afa6edc62c24d5aee7c4c2dcd11385964d3b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          green.json
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\customtkinter\assets\themes\green.json
          • Size 4KB
          • SHA256 79ad86bfea7f0557ac1e20802892abb44a967af15b9315b0039cd75c8b72a776
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libcrypto-1_1.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\libcrypto-1_1.dll
          • Size 3.2MB
          • SHA256 296426e7ce11bc3d1cfa9f2aeb42f60c974da4af3b3efbeb0ba40e92e5299fdf
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libffi-7.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\libffi-7.dll
          • Size 32KB
          • SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libssl-1_1.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\libssl-1_1.dll
          • Size 674KB
          • SHA256 fddd0da02dcd41786e9aa04ba17ba391ce39dae6b1f54cfa1e2bb55bc753fce9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          pyexpat.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\pyexpat.pyd
          • Size 188KB
          • SHA256 e338df1432d8e23c0399f48fa2019fbaa3051fae6e7d214c731a0b8de7d0388e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          python39.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\python39.dll
          • Size 4.3MB
          • SHA256 f8172151d11bcf934f2a7518cd0d834e3f079bd980391e9da147ce4cff72c366
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          pywintypes39.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\pywin32_system32\pywintypes39.dll
          • Size 132KB
          • SHA256 39430d5470816d712e844d990ddb52671788ab7c484dfcc6df0227fb6c0e3d09
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          select.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\select.pyd
          • Size 28KB
          • SHA256 d56542143775d02c70ad713ac36f295d473329ef3ad7a2999811d12151512931
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          tcl86t.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\tcl86t.dll
          • Size 1.6MB
          • SHA256 f650d6bc321bcda3fc3ac3dec3ac4e473fb0b7b68b6c948581bcfc54653e6768
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          msgcat-1.6.1.tm
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\tcl8\8.5\msgcat-1.6.1.tm
          • Size 33KB
          • SHA256 4fdf70fdcedef97aa8bd82a02669b066b5dfe7630c92494a130fc7c627b52b55
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          tk86t.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\tk86t.dll
          • Size 1.4MB
          • SHA256 1a6d0871be2fa7153de22be008a20a5257b721657e6d4b24da8b1f940345d0d5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          unicodedata.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\unicodedata.pyd
          • Size 1.1MB
          • SHA256 e3ab6e5749a64e04ee8547f71748303ba159dd68dfc402cb69356f35e645badd
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          win32crypt.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI34482\win32\win32crypt.pyd
          • Size 120KB
          • SHA256 e466b95eb69f27eb0deded09347437c78cdb981ccf6fbe4e450c3869540db5ab
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download