Analysis

  • max time kernel
    150s
  • max time network
    112s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    14/07/2026, 22:27

General

  • Target
    2026-07-14_3f7f073535cbbd3aa75025180dd3e2cf_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
  • Size 19.4MB
  • Sample260714-2df1saey6p
  • SHA256 96f16d4a0ec034dea9389a84406ee9ad78c7fb9f893b65a7ba72c2e2d48a36c2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 33 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3f7f073535cbbd3aa75025180dd3e2cf_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-14_3f7f073535cbbd3aa75025180dd3e2cf_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2180
    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3f7f073535cbbd3aa75025180dd3e2cf_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-07-14_3f7f073535cbbd3aa75025180dd3e2cf_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:3408
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "ver"
        3⤵
          PID:3624

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          VCRUNTIME140.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\VCRUNTIME140.dll
          • Size 116KB
          • SHA256 4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
          • MD5 SHA1 SHA512 SSDEEP TLSH

          _bz2.pyd

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\_bz2.pyd
          • Size 82KB
          • SHA256 1be51ef2b5acbe490217aa1ff12618d24b95df6136c6844714b9ca997b4c7f9b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          _ctypes.pyd

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\_ctypes.pyd
          • Size 121KB
          • SHA256 3d43869a4507ed8ece285ae85782d83bb16328cf636170acb895c227ebb142ac
          • MD5 SHA1 SHA512 SSDEEP TLSH

          _lzma.pyd

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\_lzma.pyd
          • Size 155KB
          • SHA256 663f1087c2ed664c5995a3ffa64546d2e33a0fce8a9121b48cc7c056b74a2948
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-console-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-core-console-l1-1-0.dll
          • Size 15KB
          • SHA256 58a2adaef7a47cc8c31b20767bef3845d3ee86c283f84a85a5b3ee4a4918b8ab
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-datetime-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-core-datetime-l1-1-0.dll
          • Size 14KB
          • SHA256 027b818285e530559c3e5c91d0048694686175a1145a3bedb31665652df69322
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-debug-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-core-debug-l1-1-0.dll
          • Size 14KB
          • SHA256 41794740c9406386c2322514eb08004c9af410cadfdf08083a62989eeb7c3b8c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-errorhandling-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-core-errorhandling-l1-1-0.dll
          • Size 14KB
          • SHA256 5ae77c513b276aa9b66b2f96755656a57dba64959dc36b2768af57e70c0fd689
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-file-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-core-file-l1-1-0.dll
          • Size 18KB
          • SHA256 573ca27086fbd5c16246a15dad445802c6ae63c5eeada7d3268b3170e429ffaa
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-file-l1-2-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-core-file-l1-2-0.dll
          • Size 18KB
          • SHA256 d9973270a952b4ce615104520051e847b26e4b1cc330a5a95ba1ae128f0dfdeb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-file-l2-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-core-file-l2-1-0.dll
          • Size 18KB
          • SHA256 144d3a28e43e47fc1cce956255cc80467d4a6fbbb8f612ec6d85f62de030a924
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-handle-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-core-handle-l1-1-0.dll
          • Size 14KB
          • SHA256 f47659c9183e12ce8db1719da0327ef22ffa734837279ba9da4d3455b177d49e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-heap-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-core-heap-l1-1-0.dll
          • Size 15KB
          • SHA256 0d4d1e93b6c3cee5541672f254833302716f7c29934046ef009c186f31355bdc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-interlocked-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-core-interlocked-l1-1-0.dll
          • Size 14KB
          • SHA256 75d450d7bab2aa404a9c8680c19c504458c5b192e8adf55eb851d6e3acd71c54
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-libraryloader-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-core-libraryloader-l1-1-0.dll
          • Size 15KB
          • SHA256 0716de6250f9f5d1c17aff3706cceef232ecda4fa3bbc8951a5704097fd46608
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-localization-l1-2-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-core-localization-l1-2-0.dll
          • Size 20KB
          • SHA256 6475f20f46814d28845c2fa73e9c283a8504483fa16d911325588c778cf76c26
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-memory-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-core-memory-l1-1-0.dll
          • Size 15KB
          • SHA256 95ab058f2354fb938bd9b2ac550c97668a923b4ab61580b1057ae35e1dbe0eef
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-namedpipe-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-core-namedpipe-l1-1-0.dll
          • Size 14KB
          • SHA256 5406eb984ec30814152c8fc046328ccfc3db50a75ddb9617da0b05ee2eaed357
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-processenvironment-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-core-processenvironment-l1-1-0.dll
          • Size 15KB
          • SHA256 afb27964777b2359ffb3b27c2f54071bd700ce31236bbb178f017765a99f1225
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-processthreads-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-core-processthreads-l1-1-0.dll
          • Size 16KB
          • SHA256 85f049fe96c1e300038707fbac175c6220764105e48c34f0465453e2197daf5e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-processthreads-l1-1-1.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-core-processthreads-l1-1-1.dll
          • Size 18KB
          • SHA256 ae574c9b8a2467c3ee0ac3e862255e93a02627bce146ad7b720b99905dc224fc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-profile-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-core-profile-l1-1-0.dll
          • Size 14KB
          • SHA256 9bd2ccfa6bf90968844934e1c48bd03aaa996688ab51b28fa640c007522b6f85
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-rtlsupport-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-core-rtlsupport-l1-1-0.dll
          • Size 15KB
          • SHA256 a2fee17793c109fd141d8c095f0f10cadc46533b8213dc1cfa2e664471c46faf
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-string-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-core-string-l1-1-0.dll
          • Size 14KB
          • SHA256 46d5e0e76c1ce82487fc8605fa2bff9e27061ec1eb4c32edb7540b39cf360dd0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-synch-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-core-synch-l1-1-0.dll
          • Size 16KB
          • SHA256 5b67db76cc6499139a508e65232cf49c2331b41ae46b05fbc649c754dad4b021
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-synch-l1-2-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-core-synch-l1-2-0.dll
          • Size 18KB
          • SHA256 9566b81b1c6db1727a4bb3a7a3de12247ff5297f34548593280ec31f2b2e2c65
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-sysinfo-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-core-sysinfo-l1-1-0.dll
          • Size 15KB
          • SHA256 b4c854f44c3e59f8d0a1c185015c7b1928218ede3b081153647f428fdf0c6e2d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-timezone-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-core-timezone-l1-1-0.dll
          • Size 18KB
          • SHA256 5909e928d791f67a13e3130033cb0e2178f5167a644c3ab5336322d38356db47
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-util-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-core-util-l1-1-0.dll
          • Size 14KB
          • SHA256 f062176f84969e985b730277af64edb013b3ab96723663e227f54aaf83cb9d85
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-conio-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-crt-conio-l1-1-0.dll
          • Size 15KB
          • SHA256 3419346e531627b2b0449a1078072a856aa9c1843fccce77db05df117377e631
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-convert-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-crt-convert-l1-1-0.dll
          • Size 22KB
          • SHA256 91c5966932287078d0e616d8e0369347991f39765749bbffa1ed3a9df49776d9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-environment-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-crt-environment-l1-1-0.dll
          • Size 18KB
          • SHA256 8d9d3e905d072c4465e4787dd5bd843d3a5dd5ac5ad9d7f232032b25facc82ab
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-filesystem-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-crt-filesystem-l1-1-0.dll
          • Size 20KB
          • SHA256 8f9361d02f68392127fe264655eac4fef4a4a1bf63571f184ce26faa98670702
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-heap-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-crt-heap-l1-1-0.dll
          • Size 18KB
          • SHA256 76dad3e04c9ff61b40ae1c9e039837cd1c077d59b6a008643e4fbf2dbdb564dc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-locale-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-crt-locale-l1-1-0.dll
          • Size 18KB
          • SHA256 ba1458f730ff90009483c763926d1c74383480e529541c0ef5d4de44e7a4f14c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-math-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-crt-math-l1-1-0.dll
          • Size 27KB
          • SHA256 5f2bb085217304006c81c55214c6093ec476e554e31808026e424da82f58aa0e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-multibyte-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-crt-multibyte-l1-1-0.dll
          • Size 25KB
          • SHA256 0aa2cf2cc029c95fc053374071d7873edddc410ff8858720ee5c29bfee62dddc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-process-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-crt-process-l1-1-0.dll
          • Size 15KB
          • SHA256 13deabf273e9b9862a2a3aaea06d35060359f0b552d43816e7256f3221c11d20
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-runtime-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-crt-runtime-l1-1-0.dll
          • Size 22KB
          • SHA256 11aca97acda31203aeee496c9f183b49db1c54d0efa48888a15ab4ea47ee080f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-stdio-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-crt-stdio-l1-1-0.dll
          • Size 24KB
          • SHA256 cf7bbe93ae75a1c46a38204a6acef71bf2f5e3cd34501825601900e07d3d7b15
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-string-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-crt-string-l1-1-0.dll
          • Size 24KB
          • SHA256 b516d1772b75714f039440cf5d070b87a187d2f67b7f891c94cf1c60330fbfa7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-time-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-crt-time-l1-1-0.dll
          • Size 20KB
          • SHA256 a4b0f75854949980d410c5da90c36ddb94be292431c89fd3e992f9d5f8ee9983
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-utility-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\api-ms-win-crt-utility-l1-1-0.dll
          • Size 18KB
          • SHA256 d675ee0c418c4cd7ff0c19c2d945331c8e6072a51abbca548e7d9d2f1bf288dd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          base_library.zip

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\base_library.zip
          • Size 1.4MB
          • SHA256 ddae108c6eea2c0fc241ee1e5c58f97be5e38aa8b12ae4f14aa2ba9fa40c91e3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          bc-edge-enclave-seal.exe

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\bc-edge-enclave-seal.exe
          • Size 204KB
          • SHA256 9e4dfc68cde277be9ab0bba982651c20e9bec0c35a50ce8d4da2d2db28871e9f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          build.stamp

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\build.stamp
          • Size 6B
          • SHA256 1fb390d558fc768a15f7a4fb2f66f069d445b449911cd666183a776fad25cd98
          • MD5 SHA1 SHA512

          default_s.json

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\default_s.json
          • Size 117B
          • SHA256 4ff36b839fdd4eb7a8efc46c0336129f4d4501696c1b871ec1a0013c09929574
          • MD5 SHA1 SHA512 TLSH

          libcrypto-3.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\libcrypto-3.dll
          • Size 5.0MB
          • SHA256 05fe080eab7fc535c51e10c1bd76a2f3e6217f9c91a25034774588881c3f99de
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libffi-8.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\libffi-8.dll
          • Size 38KB
          • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libssl-3.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\libssl-3.dll
          • Size 768KB
          • SHA256 2e9fbcd8f7fdc13a5179533239811456554f2b3aa2fb10e1b17be0df81c79006
          • MD5 SHA1 SHA512 SSDEEP TLSH

          pyexpat.pyd

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\pyexpat.pyd
          • Size 193KB
          • SHA256 58b95f03a2d7ec49f5260e3e874d2b9fb76e95ecc80537e27abef0c74d03cb00
          • MD5 SHA1 SHA512 SSDEEP TLSH

          python3.DLL

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\python3.DLL
          • Size 65KB
          • SHA256 920350a7c24c46339754e38d0db34ab558e891da0b3a389d5230a0d379bee802
          • MD5 SHA1 SHA512 SSDEEP TLSH

          python311.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\python311.dll
          • Size 5.5MB
          • SHA256 2835e0f24fb13ef019608b13817f3acf8735fbc5f786d00501c4a151226bdff1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          select.pyd

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\select.pyd
          • Size 29KB
          • SHA256 fb06ac13f8b444c3f7ae5d2af15710a4e60a126c3c61a1f1e1683f05f685626c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ucrtbase.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI21802\ucrtbase.dll
          • Size 973KB
          • SHA256 4c5b8e529854cedfa8f46cd6906952400cdbbf25efc4cf37dda2c42d8e96ddcb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          memory/3408-165-0x00000247B3050000-0x00000247B3054000-memory.dmp

          memory/3408-164-0x00000247B33D0000-0x00000247B33D1000-memory.dmp

          memory/3408-170-0x00000247B3C20000-0x00000247B3C24000-memory.dmp

          memory/3408-169-0x00000247B3BE0000-0x00000247B3BFA000-memory.dmp

          memory/3408-171-0x00000000655C0000-0x0000000065669000-memory.dmp

          memory/3408-168-0x00000247B32A0000-0x00000247B32B3000-memory.dmp

          memory/3408-167-0x00000247B3060000-0x00000247B307A000-memory.dmp

          memory/3408-166-0x00000247B1E20000-0x00000247B1E2E000-memory.dmp