Overview

overview

7

Static

static

3

2026-07-17...at.exe

windows10-2004-x64

7

2026-07-17...at.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    118s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    18/07/2026, 04:47

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-17_1439dcc9cc1c9bbd5fcf99b5bc797576_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
  • Size 66.0MB
  • Sample260718-fezcvsbz7x
  • SHA256 67f341147dd0d70237bcf2ecaa0d8b8f5547f18bac8ccbf7a99b516c64e9854e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
execution

Malware Config

Signatures

  • Loads dropped DLL 23 IoCs
  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

    execution
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-17_1439dcc9cc1c9bbd5fcf99b5bc797576_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-17_1439dcc9cc1c9bbd5fcf99b5bc797576_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1848
    • C:\Users\Admin\AppData\Local\Temp\2026-07-17_1439dcc9cc1c9bbd5fcf99b5bc797576_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-07-17_1439dcc9cc1c9bbd5fcf99b5bc797576_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:2676
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "ver"
        3⤵
        • Executes a command shell one-liner
        PID:3424

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\VCRUNTIME140.dll
        • Size 116KB
        • SHA256 4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\_bz2.pyd
        • Size 82KB
        • SHA256 00b8ca9a338d2b47285c9e56d6d893db2a999b47216756f18439997fb80a56e3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\_ctypes.pyd
        • Size 121KB
        • SHA256 c148292328f0aab7863af82f54f613961e7cb95b7215f7a81cafaf45bd4c42b7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\_lzma.pyd
        • Size 155KB
        • SHA256 f5e01b516c2c23035f7703e23569dec26c5616c05a929b2580ae474a5c6722c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-console-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-core-console-l1-1-0.dll
        • Size 11KB
        • SHA256 8b38d515630c44d734d502909e670fff3e302763b4a83866c3abd5bcaf037861
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-datetime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-core-datetime-l1-1-0.dll
        • Size 11KB
        • SHA256 030ffcf557e8fa9e873428746e1869b9ec4f5059e11b293a507dbd7b924c7860
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-debug-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-core-debug-l1-1-0.dll
        • Size 11KB
        • SHA256 0775604730bf3bd02ae37415368f3a375467a6a245273eb71c27a3d0d5b4d50f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-errorhandling-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 11KB
        • SHA256 bba2450b3e6a282f52f71dd6f46f16d743f068ff9f3a2440dc736dea5b539346
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-core-file-l1-1-0.dll
        • Size 14KB
        • SHA256 5fd897183cc614a4a56755194febfc4f6e58a60b214bc6a7a2d2c4b79745f3a5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-core-file-l1-2-0.dll
        • Size 11KB
        • SHA256 d97043a29a2d90ff58c85ba862d9e18dde15f09cdf8c51d71066e6f9c637a709
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l2-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-core-file-l2-1-0.dll
        • Size 11KB
        • SHA256 caef9078861948570147dbdbfcda0786cc080bce39207ba614380745f24e357e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-handle-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-core-handle-l1-1-0.dll
        • Size 11KB
        • SHA256 aec9e34a33464a02bfaab14a3b02176c2e4fd88526d6d64c9fe1ca091fe9d878
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-core-heap-l1-1-0.dll
        • Size 11KB
        • SHA256 af3413962c0dbd3c130e193f655d7a5c67a5f6c891663149cec191df0353fb70
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-interlocked-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 11KB
        • SHA256 54949b6cd842d278dd5015b4ba0e8a78c309fbe4cd74bd7c8cc0b0d69742d206
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-libraryloader-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 12KB
        • SHA256 8ffc20c4b6969da968071d90612434c84ef6494c8db0daf3d1bfa12c7b287ea7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-localization-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-core-localization-l1-2-0.dll
        • Size 14KB
        • SHA256 58001341d3ebe4486619a95a7f3513459a4b4a9edb652204e8bf1c3bbc3a9fdf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-memory-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-core-memory-l1-1-0.dll
        • Size 11KB
        • SHA256 2e94888e4280f83889a39606cbaf73412e46de811ab5fc82b1292b6a82e8640c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-namedpipe-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 11KB
        • SHA256 1e74567f5b4401f98428d3eca74ec3530c91bb04f9dfeafd13c56fbf88e7b704
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processenvironment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 12KB
        • SHA256 9db29ab913f1536021bfdb9c434f2e3e3b860a99925bde4b681ed9e0a256a623
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 13KB
        • SHA256 b2a58ef05274d9d0688a2c3cad9ae1e3e0d984efaa5786efba787bcbe3dcaaac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 11KB
        • SHA256 0b63b7c742e46dcf9213fd3179d6f6761d912a97b63fbc25a60e0384fdef6d33
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-profile-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-core-profile-l1-1-0.dll
        • Size 11KB
        • SHA256 a2fc665dd493610018d78a3549fa84ce518f3c66006bfc7bfb4e17b3e807cf8a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-rtlsupport-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 11KB
        • SHA256 b8f0cd4768cbd85b64797671dfbac11616b2b415a52f1c20c7dc60f267c7d163
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-core-string-l1-1-0.dll
        • Size 11KB
        • SHA256 4a0a694f4e15cd2d8e0d995c6479ab99c63483c05d0e3d1dee39b5410d3d424e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-core-synch-l1-1-0.dll
        • Size 13KB
        • SHA256 cdaeb173578e129d9ee307f13670269a719149019bbed811af3433914f18dda8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-core-synch-l1-2-0.dll
        • Size 11KB
        • SHA256 b5b047c73772bc8bcef57f66711f652917cb4ac54853cf4bb63447238834a1e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-sysinfo-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 12KB
        • SHA256 fe08437dcb64a448b33eea7557bfe9e35873a1c62bfbd8a6294e63c11b0984fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-timezone-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-core-timezone-l1-1-0.dll
        • Size 11KB
        • SHA256 ec22fc858107ecf25c31ed139c71b70ed6e4dc4add0d36b28eb530c37bb5d268
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-util-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-core-util-l1-1-0.dll
        • Size 11KB
        • SHA256 658aab1c7d3b46c0cbd326bc186e1b5fa1e2b2d9dd8535d312cec7857a245bd8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-conio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-crt-conio-l1-1-0.dll
        • Size 12KB
        • SHA256 b67169b2564a88d6b84b4049e49016f0d2d1c33cc683b557e6a340314efed047
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-convert-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-crt-convert-l1-1-0.dll
        • Size 15KB
        • SHA256 50c82b68ca70c18e4f0db86bc9062749bc2c07fa646a9e6bc65456467cf72f3e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-environment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-crt-environment-l1-1-0.dll
        • Size 11KB
        • SHA256 6c4d20dfecfb6139ab20fd591cdb36b2368446cc28b576fe56cd74bcca5ca5cb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-filesystem-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 13KB
        • SHA256 7db0ef5da953d076247ee5c397b7b9b3d9774dd4ddc60d37054c79292ee495aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-crt-heap-l1-1-0.dll
        • Size 12KB
        • SHA256 735cd921d7083d7f5627489eeceb101297504141e3cc2fdd50b955d17f3fb5c2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-locale-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-crt-locale-l1-1-0.dll
        • Size 11KB
        • SHA256 1bae50d9bf060e9b3822d7756b61a3a7765bac3911fe2a869cc7ac5649ec0db2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-math-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-crt-math-l1-1-0.dll
        • Size 20KB
        • SHA256 87db0e7644f3aa5f11380ee3b5b0258cd578615d54075fd4e3761d6fd32f733f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-private-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-crt-private-l1-1-0.dll
        • Size 62KB
        • SHA256 761f8b32fa03d8c3eec94483f03d71d06c4cce69c17ee8bf36988ad95282a107
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-process-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-crt-process-l1-1-0.dll
        • Size 12KB
        • SHA256 9dd321104a45aa711c006c149a9e2ebca573f89f48c0864bccceae1d4aa67ac7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-runtime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 15KB
        • SHA256 376f525e7d5e039701cc9358e51cb4c074e6508b5e7bbdce5507cd5e4e2bef64
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-stdio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 17KB
        • SHA256 4083dd864dde401e1e7cdd32808d321a6630f5970a65aa52e4d2e01730380b81
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-crt-string-l1-1-0.dll
        • Size 17KB
        • SHA256 267c56b466244ab1c9670ecdfabf19148674b781a362de9eeca4de8a36079c72
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-time-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-crt-time-l1-1-0.dll
        • Size 13KB
        • SHA256 a519f02302d35b05339fbb9a2b67a2e463d87e14ade5292a6979822698a81a9b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-utility-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\api-ms-win-crt-utility-l1-1-0.dll
        • Size 11KB
        • SHA256 a3e9c75113d9d1e9479b062708a7c370a930016f6bc6160f29c46bac36fca132
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\base_library.zip
        • Size 1.4MB
        • SHA256 ce0eb1d60e0eab9e530b822c6b56e2421587d3a4a549d6fd817be10b8e79d59f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        icon.ico
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\icon.ico
        • Size 108KB
        • SHA256 b8045c1d8c6ddc8e2323561297593f40f094c5bd4e897a4047b2383ca3de3a17
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        icon.png
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\icon.png
        • Size 511KB
        • SHA256 66b9621cf4fe5605c1509803fff6f102751edc3b8ce34448326f6876f3089eaf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 05fe080eab7fc535c51e10c1bd76a2f3e6217f9c91a25034774588881c3f99de
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\libssl-3.dll
        • Size 768KB
        • SHA256 2e9fbcd8f7fdc13a5179533239811456554f2b3aa2fb10e1b17be0df81c79006
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pyexpat.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\pyexpat.pyd
        • Size 194KB
        • SHA256 c7c7564f7f874fb660a46384980a2cf28bc3e245ca83628a197ccf861eab5560
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.DLL
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\python3.DLL
        • Size 65KB
        • SHA256 db84bc052cfb121fe4db36242ba5f1d2c031b600ef5d8d752cf25b7c02b6bac6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python311.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\python311.dll
        • Size 5.5MB
        • SHA256 0817a2a657a24c0d5fbb60df56960f42fc66b3039d522ec952dab83e2d869364
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\select.pyd
        • Size 29KB
        • SHA256 bae0974390945520eb99ab32486c6a964691f8f4a028ac408d98fa8fb0db7d90
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tcl86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\tcl86t.dll
        • Size 1.8MB
        • SHA256 4e699ff2d6d147d0586c8c77be5a18f20ca0758f432d7b0f489223f2fa4dd221
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18482\ucrtbase.dll
        • Size 1011KB
        • SHA256 e188604616dccd066abd675883c8c86a4d2bd6a987c57667de6a644652b63443
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/2676-1118-0x00007FFC6BFF0000-0x00007FFC6D36E000-memory.dmp
        Download