Analysis

  • max time kernel
    150s
  • max time network
    113s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    15/07/2026, 04:31

General

  • Target
    2026-07-15_9fcb53f1e39e4fc42093e97c0b8d488f_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe
  • Size 38.7MB
  • Sample260715-e5fsrsev61
  • SHA256 e1e5786a9319b61935e6ef1af886e87feaf4d1a9132afc68574cd2116ff576bd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-15_9fcb53f1e39e4fc42093e97c0b8d488f_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-15_9fcb53f1e39e4fc42093e97c0b8d488f_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3124

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        vbam.ini

        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 a5a05004b4566614aefda2d5f0746f59c0f6c2ed86afeced78c1e026a786784b
        • MD5 SHA1 SHA512 TLSH

        vbam.ini

        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 30373c9496b93989dfe4959b59eeff9a34a72e722317ca7f71affed593fd3ddf
        • MD5 SHA1 SHA512 TLSH

        vbam.ini

        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 599fcfb8a04cc39768d9b20c09d99bd79542e7c10014b643bcceeb71dc06fe64
        • MD5 SHA1 SHA512 TLSH

        vbam.ini

        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 97ffb5edf4ce1f0374296d8664b0694773a19c96c1c875962be7de01d0e37189
        • MD5 SHA1 SHA512 TLSH

        vbam.ini

        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 3a6f08fdb519d7d83869a336478d33cf24ce7d46394be98690737f8eb85e7b7e
        • MD5 SHA1 SHA512 TLSH

        vbam.ini

        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 64578991662b7495ec9d046e57ffa5779e5853f3058c8f9382b97e7dcaf33b6e
        • MD5 SHA1 SHA512 TLSH

        vbam.ini

        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 2e963b144ee9b856b818cf9f630298cae91bbb8b64fd4ba21d22d55f88f3fd20
        • MD5 SHA1 SHA512 TLSH

        vbam.ini

        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 3f1d387658d75921835565b6b0f122be5ca86517f2a070e35625ca3420c31f7e
        • MD5 SHA1 SHA512 TLSH

        vbam.ini

        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 46e751e76c13300825c117a1eb73612c044178781ef1fe8863b7b4e0a8341ec2
        • MD5 SHA1 SHA512 TLSH

        vbam.ini

        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 d1aaaf14cf15b5b42c47abb3b06368a8084aebe0b6bbd5f25363ac95cc16cd78
        • MD5 SHA1 SHA512 TLSH

        vbam.ini

        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 ba9c586dfd709fd3d2924570481d0ba1db37bf78566ee89dc3cf9ce936f93493
        • MD5 SHA1 SHA512 TLSH

        vbam.ini~RFe592532.TMP

        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini~RFe592532.TMP
        • Size 3KB
        • SHA256 dc3d987a581d0c5b3be1f4a80693261f64eadae9ae6468fba44d2f5f8d0ea297
        • MD5 SHA1 SHA512 TLSH