Overview

overview

3

Static

static

3

2026-07-15...ot.exe

windows10-2004-x64

1

2026-07-15...ot.exe

windows11-ltsc_2024-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    133s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    15/07/2026, 04:18

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-15_c6db16658ff4bb040f08e64bb8ef71da_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe
  • Size 38.8MB
  • Sample260715-ew441aes7v
  • SHA256 857fd13f8dd698f8f238187d744c5d546abda6095ec377f9261fb12e4f865360
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-15_c6db16658ff4bb040f08e64bb8ef71da_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-15_c6db16658ff4bb040f08e64bb8ef71da_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:240
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    1⤵
      PID:4648

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          vbaB128.tmp
          • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbaB128.tmp
          • Size 3KB
          • SHA256 97ffb5edf4ce1f0374296d8664b0694773a19c96c1c875962be7de01d0e37189
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          vbaD07F.tmp
          • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbaD07F.tmp
          • Size 3KB
          • SHA256 3f1d387658d75921835565b6b0f122be5ca86517f2a070e35625ca3420c31f7e
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          vbam.ini
          • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
          • Size 3KB
          • SHA256 a5a05004b4566614aefda2d5f0746f59c0f6c2ed86afeced78c1e026a786784b
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          vbam.ini
          • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
          • Size 3KB
          • SHA256 30373c9496b93989dfe4959b59eeff9a34a72e722317ca7f71affed593fd3ddf
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          vbam.ini
          • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
          • Size 3KB
          • SHA256 d1aaaf14cf15b5b42c47abb3b06368a8084aebe0b6bbd5f25363ac95cc16cd78
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          vbam.ini
          • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
          • Size 3KB
          • SHA256 c6604d815c0f6bf60e9494e58c01af0a2f10ff67f9506c82286e22976e0a974e
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          vbam.ini
          • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
          • Size 3KB
          • SHA256 536525847e81c2caa0e9df4311137eef9be87bf25c5627027d4ceb80eb658312
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          vbam.ini
          • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
          • Size 3KB
          • SHA256 599fcfb8a04cc39768d9b20c09d99bd79542e7c10014b643bcceeb71dc06fe64
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          vbam.ini
          • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
          • Size 3KB
          • SHA256 3a6f08fdb519d7d83869a336478d33cf24ce7d46394be98690737f8eb85e7b7e
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          vbam.ini
          • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
          • Size 3KB
          • SHA256 ba9c586dfd709fd3d2924570481d0ba1db37bf78566ee89dc3cf9ce936f93493
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          vbam.ini~RFe59b0e7.TMP
          • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini~RFe59b0e7.TMP
          • Size 3KB
          • SHA256 dc3d987a581d0c5b3be1f4a80693261f64eadae9ae6468fba44d2f5f8d0ea297
          • MD5 SHA1 SHA512 TLSH
          Submit Download