Analysis
- max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
15/07/2026, 04:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_9fcb53f1e39e4fc42093e97c0b8d488f_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_9fcb53f1e39e4fc42093e97c0b8d488f_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-07-15_9fcb53f1e39e4fc42093e97c0b8d488f_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe
- Size 38.7MB
- Sample260715-e5fsrsev61
- SHA256 e1e5786a9319b61935e6ef1af886e87feaf4d1a9132afc68574cd2116ff576bd
- MD5 9fcb53f1e39e4fc42093e97c0b8d488f
- SHA1 458bcd70523bdde4f37a605e6126e5d58e8d580f
- SHA512 6192fbc5495703cc851ab4396e759f514466d63e7b35806053051749bc090c9ec9bed75d484d5cd9dd1f494e53b40cbdc098aa911c105bb5acfd04db5d14c76a
- SSDEEP 393216:Mi60aNRKlyw6nXLZ6gJbAbACC5KG1QYqRqe2R0Lg11qTK4he00g83PO/d8F1fDWr:gdMAmX1/xDl
- TLSH T13097AE0AF2A615D4D5BBC078CA56D613F7B13869036067EB269056B92F37BE02E7F310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1904 2026-07-15_9fcb53f1e39e4fc42093e97c0b8d488f_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe 1904 2026-07-15_9fcb53f1e39e4fc42093e97c0b8d488f_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe 1904 2026-07-15_9fcb53f1e39e4fc42093e97c0b8d488f_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-15_9fcb53f1e39e4fc42093e97c0b8d488f_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-15_9fcb53f1e39e4fc42093e97c0b8d488f_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:1904
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
- Size 3KB
- SHA256 42749247b1519c327ae8b59c2fb84fc1ba86a7700a0f7ea51f50b2f8da78f2d3
- MD5 acf7d78b8bb535abc61bc16eb29bc81a
- SHA1 1f6b04fac40fbc170f42d0933a310d4b155fd300
- SHA512 9864c4aaa2c866bc210121103accbc9328d9a467859a41f8fc321ca599e131556063889a2ec9af049df14629f73ec9a73f94362803d57752fe0494f17880139c
- TLSH T131718BD4F735B899D472B906613F7284ACA61FE17CE1BC23C7163CD89E898D0CA26097
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
- Size 3KB
- SHA256 f197b2192d35958a4dfa537c17d41cd7ec373d691bc30d446e3137b07f1adaf9
- MD5 2e775b0352475f25c19535d91e5d9183
- SHA1 7760bd8cdfcab2054b0502a0ffa19827a157a439
- SHA512 3a5f8402f5d26f1191af6ace7085359510108adf4254ff9ec188d898887fc96d291a2974f7357119ad790971b8ffefc9e3276dfb43618b95a94262be970026b7
- TLSH T154819BD4F735B899D472B906613F7284ACA61FE17CE1BC23C7163CD89E898D0CA26197
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
- Size 3KB
- SHA256 5f34a2e37985be7fdb5d7b4a517631786fb9763e13eb5c17c430fec5fda126f3
- MD5 934260c51e283178e3fda1955a8a070d
- SHA1 96b00115a09e4baa85124d2408c927ab29c7bfdc
- SHA512 ea89a2fb58c0f85134f14bd18241056a1c6c56d3f691763146806dd8c645f8d4a1ae65cd5724fe90d94b6ebad5cc85d9463d0cc1eac174deb555c48ae2d756ce
- TLSH T18B819CD4F735B899D472B906613F7284ACA61FE17CE1BC23C7163CD89E898D0CA26197
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
- Size 3KB
- SHA256 9f50336bc8f6288b78402182cfba24adf3e69c00e39e7da4e962572ca33ab446
- MD5 386e68bf51ef729f6b3bbdd4e65efe81
- SHA1 32b8e12731c7362dafd3f64fed1e57d961f69810
- SHA512 4f752e92c10b338f031f01c6c5d42a45c69ba64a709f3f4201c3d1c647cec3f5c6f8541f3fc2dbd8da113548e7390a6da42ec31884bfc141852c64fdc304d72d
- TLSH T15F818BD4F735B899D472B906613F7284ACA61EE17CE1BC23C7163CD89E898D0CA26197
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
- Size 3KB
- SHA256 ea01d81d401c6bf403324e8f2c450abe23b2709c8db7fbba96f3aa29119d959e
- MD5 b8312fa00483e995ef23aaf3c66e4391
- SHA1 73d8eef5a2ddbb9543f39b12c1e55fa03394e386
- SHA512 fb42e048f4d8ee4d1a4a2bc9ab8dd8eb7918594d3143bbf10bb3f26f17c801c0d55740fb6f744abf37f3c83e5a116a3b753f80cc1409a0b7f1f0f65112737cf6
- TLSH T1D7717BD4F725B899D476B906623F7284ACA61FE17CE1BC23C7163CD49EC98D0CA26097
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
- Size 3KB
- SHA256 a5a05004b4566614aefda2d5f0746f59c0f6c2ed86afeced78c1e026a786784b
- MD5 7c26e6014b9b1ce689f013f4d8aded08
- SHA1 79452e16ba8dc5d4029dfb461e084bc8226be079
- SHA512 8b90fb09c4d2fa1e403da6708c9bd90968a92c9e3c4ff791579b9545a9cfa3be505f000faf62c281eab97ac682906716d37b59a902772a7c49ac7d18dff50575
- TLSH T11D7179D4F725B899D476B906613F7284ACA62EE17CE1BC23C7163CD49E898D0CA26097
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
- Size 3KB
- SHA256 9a6a31b2b2818c1f3de7a37c28e568c4c9e85aae696787a451ca6cc039d34e67
- MD5 0830afcafac59b8eabc6cd1983bcd051
- SHA1 3e1d4262de9e88628b86e4cbf7c348004b2b50ba
- SHA512 27d0a9a75a939a0cbabfc50210d9bf25d891c5cb49f71cd1b7a651696a02aeea075c5f4b81d6ab0793c8b80ae8b1428435e2ab805d7f2fd0c5f0a71cf40a965c
- TLSH T1C67189D4F725B899D472B906613F7284ACA22EE17CE1BC23C7163CD49E898D0CA26097
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
- Size 3KB
- SHA256 c1ef0b2d911aff392bc04ec677f76878fe60f0e8046261a0ff8d7a083836d7c0
- MD5 008e58cf89e109b855f9542941499ce1
- SHA1 92cc1278ac88e1346f26177a85982ff812bb3c66
- SHA512 0fe639f00c02ea45c9dbceeadec46ac4fe46263c075e99122185907a528c371d8acb29032397f510b830b8dddead8aa9eee419c907a08137a8341f36039ae0fc
- TLSH T1F1718AD4F725B899D472B906613F7284ACA22FE17CE1BC23C7163CD49E898D0CA26097
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
- Size 3KB
- SHA256 59830d1b4a07df4273f76d14606ef4018f84a9361d920fdc5ca79c2ee2f933fe
- MD5 ba3e842a4c8d3be62246f6a872ce20b8
- SHA1 01c2161774bbeeaf42a7981cee972c53333f9fe9
- SHA512 153f788e0f84b34aa9553459fb848e45a79757b8409d818b9669bf29241e5dd7ce035d800612d205aa920ff492c3b9dfea006d15f6b7e323ecb24bbd61e00a0b
- TLSH T123718AD4F725B899D472B906613F7284ACA62FE17CE1BC23C7163CD49EC98D0CA26097
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
- Size 3KB
- SHA256 eed0d97f2b86d38c6f55909cd7c48eaaa68acba5a11b6d07fb29ebd487dc0789
- MD5 0cb6946ebd50c3ab7c5640088dd90483
- SHA1 8f6bcddf007121b15bb714270967a5190910d02e
- SHA512 737546fccb47a956b5eb51538f09cc26563c50b735c5a9fb875a55652543ca9825dacb328439c9bd63dc445349456f1a4bd41558aa21d8d22f35d6ef600520c0
- TLSH T10D718BD4F725B899D472B906613F7284ACA21FE17CE1BC23C7163CD49E898D0CA26097
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
- Size 3KB
- SHA256 f9e3fef6505ff1ebacde55b32cd12d6224d19ef6737e07d7df30bf2f5816b8c9
- MD5 ccc029955b5a8cdc62d082d64c785c3d
- SHA1 de77fce5d202e9c5f820aed77e7169bfc3525a68
- SHA512 d7b5a44a5c2734950ec104dd95b197868672b58d7e96507b4350436ea293b776d9ec4f84213b003246dbe23941c7ed76535ebd8763f40f395a3820403e220d79
- TLSH T1E4718AD4F725B899D472B906613F7284ACA62FE17CE1BC23C7163CD49EC98D0CA26097
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini~RFe585407.TMP
- Size 3KB
- SHA256 dc3d987a581d0c5b3be1f4a80693261f64eadae9ae6468fba44d2f5f8d0ea297
- MD5 1c80037aa9762a68798249202fa332cb
- SHA1 aa4cfa496043a4ed543f9152e34255d009777000
- SHA512 5b9911c03692ff7348298af222b93aa6fb4e480c8e4a2130163761fb46560e02a8479804772f438894f8dc8dfc37d7fe6a11d25b0363f0db66ec8b9bb97bd001
- TLSH T142718AD4F725B899D476B906613F7284ACA62FE17CE1BC23C7163CD49EC98D0CA26097
- MD5 SHA1 SHA512 TLSH