Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    15/07/2026, 04:31

General

  • Target
    2026-07-15_9fcb53f1e39e4fc42093e97c0b8d488f_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe
  • Size 38.7MB
  • Sample260715-e5fsrsev61
  • SHA256 e1e5786a9319b61935e6ef1af886e87feaf4d1a9132afc68574cd2116ff576bd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-15_9fcb53f1e39e4fc42093e97c0b8d488f_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-15_9fcb53f1e39e4fc42093e97c0b8d488f_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1904

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        vbam.ini

        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 42749247b1519c327ae8b59c2fb84fc1ba86a7700a0f7ea51f50b2f8da78f2d3
        • MD5 SHA1 SHA512 TLSH

        vbam.ini

        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 f197b2192d35958a4dfa537c17d41cd7ec373d691bc30d446e3137b07f1adaf9
        • MD5 SHA1 SHA512 TLSH

        vbam.ini

        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 5f34a2e37985be7fdb5d7b4a517631786fb9763e13eb5c17c430fec5fda126f3
        • MD5 SHA1 SHA512 TLSH

        vbam.ini

        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 9f50336bc8f6288b78402182cfba24adf3e69c00e39e7da4e962572ca33ab446
        • MD5 SHA1 SHA512 TLSH

        vbam.ini

        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 ea01d81d401c6bf403324e8f2c450abe23b2709c8db7fbba96f3aa29119d959e
        • MD5 SHA1 SHA512 TLSH

        vbam.ini

        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 a5a05004b4566614aefda2d5f0746f59c0f6c2ed86afeced78c1e026a786784b
        • MD5 SHA1 SHA512 TLSH

        vbam.ini

        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 9a6a31b2b2818c1f3de7a37c28e568c4c9e85aae696787a451ca6cc039d34e67
        • MD5 SHA1 SHA512 TLSH

        vbam.ini

        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 c1ef0b2d911aff392bc04ec677f76878fe60f0e8046261a0ff8d7a083836d7c0
        • MD5 SHA1 SHA512 TLSH

        vbam.ini

        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 59830d1b4a07df4273f76d14606ef4018f84a9361d920fdc5ca79c2ee2f933fe
        • MD5 SHA1 SHA512 TLSH

        vbam.ini

        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 eed0d97f2b86d38c6f55909cd7c48eaaa68acba5a11b6d07fb29ebd487dc0789
        • MD5 SHA1 SHA512 TLSH

        vbam.ini

        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 f9e3fef6505ff1ebacde55b32cd12d6224d19ef6737e07d7df30bf2f5816b8c9
        • MD5 SHA1 SHA512 TLSH

        vbam.ini~RFe585407.TMP

        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini~RFe585407.TMP
        • Size 3KB
        • SHA256 dc3d987a581d0c5b3be1f4a80693261f64eadae9ae6468fba44d2f5f8d0ea297
        • MD5 SHA1 SHA512 TLSH