Overview

overview

3

Static

static

3

2026-07-20...ot.exe

windows10-2004-x64

1

2026-07-20...ot.exe

windows11-ltsc_2024-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    133s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    20/07/2026, 03:19

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-20_34dab44c560935582a801ddb317d0285_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe
  • Size 39.9MB
  • Sample260720-dvfvcagv4w
  • SHA256 be08616d227dffbc2963833a4d00c17a588aad9aa3af797566569bb0b22d2746
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-20_34dab44c560935582a801ddb317d0285_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-20_34dab44c560935582a801ddb317d0285_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1812

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        vba4F32.tmp
        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vba4F32.tmp
        • Size 3KB
        • SHA256 5797c1f6e1e30e2086713f0c6af19b92381d394da0a5083a41d800ab727b76b6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        vba4F61.tmp
        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vba4F61.tmp
        • Size 3KB
        • SHA256 2ecfd2de777aa73d72b879b8e2528c061a735e1526d11ccef309de8da50ae1e2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        vbam.ini
        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 a5a05004b4566614aefda2d5f0746f59c0f6c2ed86afeced78c1e026a786784b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        vbam.ini
        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 d910c5a1be69a0ca68b8d6d719678a829673022b2ceec0bf000570f3b4b91d88
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        vbam.ini
        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 cb5cd1a6da065ae4c0ecd6e30b10aa61e06e5e667b94ed27ccf36abcaf904ac1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        vbam.ini
        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 9f1c197e50d4aaeb9f5ebae42b185e97e24aa22c3637d8d6e8115f4761610b8a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        vbam.ini
        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 f5768f73e00d2d4af80a0d5cc9f6abce6e905c25d21763e0103a78f457b75db8
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        vbam.ini
        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 a968ff9479ff5dfae018d80e74cf5874890ac062d80875db3a301b0b1731af4e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        vbam.ini
        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 5c34ebd12410b65a8a8d3497651fe25613da1cf297688d68285c7f502e38e965
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        vbam.ini
        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 9e4ce6bbc0b283ef64380f6ed3caafe0eee88becb3c5b6ddf838e7a0151bd688
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        vbam.ini
        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
        • Size 3KB
        • SHA256 0932eaf33b8342f95daa37385dbfef76e0732b3cec851cb3a68a03b577bba6a3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        vbam.ini~RFe594f01.TMP
        • Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini~RFe594f01.TMP
        • Size 3KB
        • SHA256 dc3d987a581d0c5b3be1f4a80693261f64eadae9ae6468fba44d2f5f8d0ea297
        • MD5 SHA1 SHA512 TLSH
        Submit Download