Analysis
- max time kernel
150s - max time network
113s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
15/07/2026, 04:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_9fcb53f1e39e4fc42093e97c0b8d488f_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_9fcb53f1e39e4fc42093e97c0b8d488f_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-07-15_9fcb53f1e39e4fc42093e97c0b8d488f_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe
- Size 38.7MB
- Sample260715-e5fsrsev61
- SHA256 e1e5786a9319b61935e6ef1af886e87feaf4d1a9132afc68574cd2116ff576bd
- MD5 9fcb53f1e39e4fc42093e97c0b8d488f
- SHA1 458bcd70523bdde4f37a605e6126e5d58e8d580f
- SHA512 6192fbc5495703cc851ab4396e759f514466d63e7b35806053051749bc090c9ec9bed75d484d5cd9dd1f494e53b40cbdc098aa911c105bb5acfd04db5d14c76a
- SSDEEP 393216:Mi60aNRKlyw6nXLZ6gJbAbACC5KG1QYqRqe2R0Lg11qTK4he00g83PO/d8F1fDWr:gdMAmX1/xDl
- TLSH T13097AE0AF2A615D4D5BBC078CA56D613F7B13869036067EB269056B92F37BE02E7F310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3124 2026-07-15_9fcb53f1e39e4fc42093e97c0b8d488f_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe 3124 2026-07-15_9fcb53f1e39e4fc42093e97c0b8d488f_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe 3124 2026-07-15_9fcb53f1e39e4fc42093e97c0b8d488f_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-15_9fcb53f1e39e4fc42093e97c0b8d488f_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-15_9fcb53f1e39e4fc42093e97c0b8d488f_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:3124
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
- Size 3KB
- SHA256 a5a05004b4566614aefda2d5f0746f59c0f6c2ed86afeced78c1e026a786784b
- MD5 7c26e6014b9b1ce689f013f4d8aded08
- SHA1 79452e16ba8dc5d4029dfb461e084bc8226be079
- SHA512 8b90fb09c4d2fa1e403da6708c9bd90968a92c9e3c4ff791579b9545a9cfa3be505f000faf62c281eab97ac682906716d37b59a902772a7c49ac7d18dff50575
- TLSH T11D7179D4F725B899D476B906613F7284ACA62EE17CE1BC23C7163CD49E898D0CA26097
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
- Size 3KB
- SHA256 30373c9496b93989dfe4959b59eeff9a34a72e722317ca7f71affed593fd3ddf
- MD5 6780e9c4e3d42d13adcb21390caf0072
- SHA1 17498d4b18a93642c5c18749bfcef2c484715b14
- SHA512 f4fa01253b7397ab547f0d9dbfad9d0630aeeaa44e31e2e95f53ec1f95d907a2d38157f76974f457364bf20576e108635065452e0dfd61fc4318370d5b5e5d1c
- TLSH T16A7179D4F725B899D476B906613F7284ACA62FE17CE1BC23C7163CD49E898D0CA26097
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
- Size 3KB
- SHA256 599fcfb8a04cc39768d9b20c09d99bd79542e7c10014b643bcceeb71dc06fe64
- MD5 90b74a7764bc500dbd1e5f530e1c7ff0
- SHA1 6123550358ded9bc070f307d17ecfc5393a4c9f5
- SHA512 6798cc8ca1c5612314519c8524db74c202997a4011961f4f086209e7dfdc971912ee2b35f19ed25a510eddfb2939f7dafc06826c1ec35bda58e56d7edff5e502
- TLSH T1A0718BD4F725B899D472B906613F7284ACA21FE17CE1BC23C7163CD49E898D0CA26097
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
- Size 3KB
- SHA256 97ffb5edf4ce1f0374296d8664b0694773a19c96c1c875962be7de01d0e37189
- MD5 6c50cc09ac3051a03b95b1cad324821f
- SHA1 c42dbb71552388f35ad0ac15f02e4fbc731051da
- SHA512 fe4e64eaa16232fce5bed272df1965ae6bb3829cf1d17bb8908b03cd1656390107fcc7a486b3d6371a61b3a3991f8ef0b6d37001122dcaa6ab4755385fd8dc93
- TLSH T1017179D4F725B899D476B906613F7284ACA62FE17CE1BC23C7163CD49E898D0CA26097
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
- Size 3KB
- SHA256 3a6f08fdb519d7d83869a336478d33cf24ce7d46394be98690737f8eb85e7b7e
- MD5 8a06604fcca4350f7180d1c232015fad
- SHA1 55a1fb8353134bcaba71ed49a4cf28dd14507734
- SHA512 1df0f0f1314149769729f1e2dfc86ca61e4efa10dba91157a7f2d0e8d9c41b98e3ae47555ad8fedb58b59de06c1241be40cce59e2e2a58f3badccaecdcc4a2df
- TLSH T186718BD4F725B899D472B906613F7284ACA61FE17CE1BC23D7163CD89E898D0CA26097
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
- Size 3KB
- SHA256 64578991662b7495ec9d046e57ffa5779e5853f3058c8f9382b97e7dcaf33b6e
- MD5 378d0b50d125eb305265ac069bda21aa
- SHA1 bd399bf9390ed2abd17949005b07e0e5db6cf902
- SHA512 bef921deb86f97137fdfa979c568731d540a49db7b85f03d247010be19f026b3d6532334506b0253c7d443d8c17e4526bb8850ad8db51d3a2af34deae85b0e02
- TLSH T1C77189D4F725B899D472B907613F7284ACA62FE17CE1BC23D7163CD49E898D0CA26097
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
- Size 3KB
- SHA256 2e963b144ee9b856b818cf9f630298cae91bbb8b64fd4ba21d22d55f88f3fd20
- MD5 c81f19920466bae0e006616087ceef57
- SHA1 3ffc47bea3934093ad69984095b21f7c7606c0da
- SHA512 d941e35cb057118764430fe31499fc2d3afba95fca2b5fbce49f6cf6c22436679b9e384dfb9eeae62869fc0d6faea9ca14a9c2c214a6a47eb892deb00851b956
- TLSH T1AB718AD4F725B899D472B907613F7284ACA62FE17CE1BC23D7163CD49E898D0CA26097
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
- Size 3KB
- SHA256 3f1d387658d75921835565b6b0f122be5ca86517f2a070e35625ca3420c31f7e
- MD5 b28c67797b4005b31f603f71293ef0e5
- SHA1 6af3206015a62ae2a3c4f4d8b28e11a43aad6363
- SHA512 7329ac21c4027c8ea0c6e0fdd61d48dc6c91e5b363d0cd768b718d9d395d42421fd214a1a5c1b6aacae34a669d250cc660b1480fa0b08da32c685ceafb2d48ed
- TLSH T1F4819BD4F735B899D472B906613F7284ACA61FE17CE1BC23C7163CD89E898D0CA26097
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
- Size 3KB
- SHA256 46e751e76c13300825c117a1eb73612c044178781ef1fe8863b7b4e0a8341ec2
- MD5 ffc390118b22487ecfc305c595a964e9
- SHA1 af61249738ea81167ebaaa1ad5f12e22541abf58
- SHA512 2dbe4a0dc2b898a00dbf4baf184ea7103cd4a7a9e3b5b22fbf6ab859cab1d2f5ca00c9c5f9c11e240140108e0ec7c8303c9ad38a34d571e7ee3050112313c00b
- TLSH T1177189D4F725B899D472B907613F7284ACA62FE17CE1BC23C7163CD49E898D0CA26097
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
- Size 3KB
- SHA256 d1aaaf14cf15b5b42c47abb3b06368a8084aebe0b6bbd5f25363ac95cc16cd78
- MD5 b5504e658e32d53be843faf60b786d1c
- SHA1 4985f723fca8e1ba5ae9974a77954bc4e4c39b0e
- SHA512 beb3cddd6a9868f198c4119681df53003cd929a21f9fedf59b98779520c0f058a0de0d267c182e2d5261a4c723f14dd68f6f602dfdd97b33e1b961676856a3a0
- TLSH T195819BD4F735B899D472B906613F7284ACA61FE17CE1BC23C7163CD89E898D0CA26097
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
- Size 3KB
- SHA256 ba9c586dfd709fd3d2924570481d0ba1db37bf78566ee89dc3cf9ce936f93493
- MD5 0b2ab33ecced93bcb14a0f33639656b9
- SHA1 76795501f1bbc6eec5ac8ac4546eb2958563fe58
- SHA512 8062b029f273dacbc5a36cacb0196363d34790927ab61832acb4c67b3f1977688c798877f057311f6e32a574445a4113216a44f52da2e55ec1a9e0e265169319
- TLSH T1D9818BD4F735B899D472B906613F7284ACA61FE17CE1BC23C7163CD89E898D0CA26097
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini~RFe592532.TMP
- Size 3KB
- SHA256 dc3d987a581d0c5b3be1f4a80693261f64eadae9ae6468fba44d2f5f8d0ea297
- MD5 1c80037aa9762a68798249202fa332cb
- SHA1 aa4cfa496043a4ed543f9152e34255d009777000
- SHA512 5b9911c03692ff7348298af222b93aa6fb4e480c8e4a2130163761fb46560e02a8479804772f438894f8dc8dfc37d7fe6a11d25b0363f0db66ec8b9bb97bd001
- TLSH T142718AD4F725B899D476B906613F7284ACA62FE17CE1BC23C7163CD49EC98D0CA26097
- MD5 SHA1 SHA512 TLSH