Overview

overview

7

Static

static

3

2026-07-23...at.exe

windows10-2004-x64

7

2026-07-23...at.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    23/07/2026, 22:48

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-23_11c6020634c0da3ae49a3efe00eff983_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
  • Size 13.3MB
  • Sample260723-2rf8psde47
  • SHA256 afef61aa17c5679097fc8d6dc3e47de20562fd5aaa0be78d90ed67ab580abc96
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 28 IoCs
  • Drops file in System32 directory 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-23_11c6020634c0da3ae49a3efe00eff983_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-23_11c6020634c0da3ae49a3efe00eff983_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4656
    • C:\Users\Admin\AppData\Local\Temp\2026-07-23_11c6020634c0da3ae49a3efe00eff983_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-07-23_11c6020634c0da3ae49a3efe00eff983_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
      2⤵
      • Loads dropped DLL
      • Drops file in System32 directory
      • Suspicious use of AdjustPrivilegeToken
      PID:3764

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        ExtendedUpdates.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\ExtendedUpdates.dll
        • Size 242KB
        • SHA256 01410b91e5639a4e5db6ff731f5e4f4c2a25b6395b2f3f847dc56351c3387b5f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MSVCP140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\MSVCP140.dll
        • Size 544KB
        • SHA256 0f885b509a685d2bbfa652fed26b5fb31d88fbdab0a978c641d1c7b8aa460aa9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\_bz2.pyd
        • Size 84KB
        • SHA256 65f610646d10d5babea080e060d244b546ec52c54012e5e937dc72dcc2e2e7bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\_ctypes.pyd
        • Size 124KB
        • SHA256 0e56107a891100535f2da79d85a5ae65ff1227b4765bd108f8593ac1a1110d81
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\_lzma.pyd
        • Size 157KB
        • SHA256 e3deecc1f59a3b811c608861decd84de1e8df8bafd5e2b39188861318c5a38cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        aob.py
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\aob.py
        • Size 20KB
        • SHA256 0b8d649e7abdb19f6a69dafcc5c068645fc23587dfc7f49ae5b933edfaaf0dd5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-console-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-core-console-l1-1-0.dll
        • Size 22KB
        • SHA256 4745f2d84cd3783f43759946ed61faa99b4590b8f9d3e2ef509891ea224348ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-datetime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-core-datetime-l1-1-0.dll
        • Size 22KB
        • SHA256 33333762b0705fa862f2c69ae6700d95dd2120fdb858557f7236c8565a6f3376
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-debug-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-core-debug-l1-1-0.dll
        • Size 22KB
        • SHA256 bafd1ad4846317028ffb8edc6da6f05cb3905cfa6d8af8b9f9dfcd916d64f568
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-errorhandling-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 22KB
        • SHA256 e4c1d9c242c90aff70365b49addf90f7ca81a7f774fdad7513806d4746ba1240
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-fibers-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-core-fibers-l1-1-0.dll
        • Size 22KB
        • SHA256 c43b6924586e222352bf4ef87fd5967cfc8108c44ac403c61e10bd58ac2d12d0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-core-file-l1-1-0.dll
        • Size 26KB
        • SHA256 25785794eae17261f71ff91452bd84304e47e0c8faf93acacfa7e948cdad39f8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-core-file-l1-2-0.dll
        • Size 22KB
        • SHA256 99388fc5699811f380183653ebb4be903634ae6a1e0858fe73d6fa8bdebf6ca3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l2-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-core-file-l2-1-0.dll
        • Size 20KB
        • SHA256 f957a4c261506484b53534a9be8931c02ec1a349b3f431a858f8215cecfec3f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-handle-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-core-handle-l1-1-0.dll
        • Size 22KB
        • SHA256 afcf3780cfb7142a00b43b753a5491354ace8c2361fbcb966792fec48d271971
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-core-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 698b1ca3145740f17b09d0bb834b191826d04e2b80508563c69bd5b6418bc265
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-interlocked-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 22KB
        • SHA256 23ca56b5511cbcb93fcba8ef2f68be8944a54f712e69e29cac6852a3452f0a92
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-libraryloader-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 22KB
        • SHA256 36645500fa7e88d5f5682f39ff8ec9eba845c376c77b87a8706a89d47ded9cf1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-localization-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-core-localization-l1-2-0.dll
        • Size 22KB
        • SHA256 1671ae25449e6f8e0efba5d6e71ca189f8b6281353d3a9e3fbf75f44a681912e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-memory-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-core-memory-l1-1-0.dll
        • Size 22KB
        • SHA256 2c1c0eb7d1ebc63c50c7188798229244a11ac18396afa1ace427cc5651f0156c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-namedpipe-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 22KB
        • SHA256 a78ab5d0dad8486a17d2ee799b41b82e21a4ec8a0c16c28ff6272b5adc9ff267
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processenvironment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 22KB
        • SHA256 3fc9bf9f63f8be1638b06dfe477f3134cf4a4db7b399a5910b1db381ac470389
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 22KB
        • SHA256 53d06d7159faacfc684401c2e7024120a6fb2e49e495d9ba306917c04e519b92
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 22KB
        • SHA256 32dc2061365b39ee3967765ecc4fd53e62264e997962f9f6153e9fcd11e1b62c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-profile-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-core-profile-l1-1-0.dll
        • Size 22KB
        • SHA256 4e9549166af0b097f1cd992655617420dc475491f30e9245354d7ed7023feb43
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-rtlsupport-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 22KB
        • SHA256 8e7e7681173377a989057731eaa971b947ab877bb82865585a48a2020f3e0991
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-core-string-l1-1-0.dll
        • Size 22KB
        • SHA256 15793160c84c7b39dbf7b33fa6b4c0294489ff45e084725d769ee7d07794d972
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-core-synch-l1-1-0.dll
        • Size 22KB
        • SHA256 11d136d4fec342089fa8e43216f1272ca87432c7658a01fb85b219c5327b74a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-core-synch-l1-2-0.dll
        • Size 22KB
        • SHA256 f80455cc6bbd29c2c735d74b6740c6977c536508c3466dc2b535401e8e6142f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-sysinfo-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 22KB
        • SHA256 cfdfcda8044e4e8af1c558574c0dfb6cb8eed375848897abaffb9bbd482c7925
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-timezone-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-core-timezone-l1-1-0.dll
        • Size 22KB
        • SHA256 d8414b7c1412d7192b9d3a786df3d977cb4bf817d4e1a7fc3a37764d42afa4a1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-util-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-core-util-l1-1-0.dll
        • Size 22KB
        • SHA256 aab3485f2ddd4911d57c26dd7b29db640dc0091f203813c48f424f01d28c3308
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-conio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-crt-conio-l1-1-0.dll
        • Size 22KB
        • SHA256 f4f6d6327e19515ed1725e45bcea92d451d0ec6d14f7485b72f2393f815ec21e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-convert-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-crt-convert-l1-1-0.dll
        • Size 26KB
        • SHA256 a6db9646bfe20b9bfa729bde2524a509c4a10f0b982927d2618673b61435cc4d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-environment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-crt-environment-l1-1-0.dll
        • Size 22KB
        • SHA256 68c3235afacab672777da49158f3e5dabe5d30c677c2fa8ed0c2f09481a16d3e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-filesystem-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 22KB
        • SHA256 0b50842eec6e4a1098627799abb4c7410836304077ff631ce661e3b5e3c10931
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-crt-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 7e0428d958b5b1ae972cd8fb174b393cd1342998e24faf98d23bc9001b1e1796
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-locale-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-crt-locale-l1-1-0.dll
        • Size 22KB
        • SHA256 359c27d9a06a97d3f58ab15bd23c8aef64273623b418a8365eab8b7d98362d62
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-math-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-crt-math-l1-1-0.dll
        • Size 30KB
        • SHA256 1017b3363f8796ce61ed6ee6e5645cb853d69a54f32683fc55c6cf0cbb9dde37
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-multibyte-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-crt-multibyte-l1-1-0.dll
        • Size 30KB
        • SHA256 7db5aa0d8f9c1ed6cf2b5d531bee47256f66eb7576b12fa2bad561e4d2660e69
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-process-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-crt-process-l1-1-0.dll
        • Size 22KB
        • SHA256 55670f0f6bdb7fd4222c7a7dfd2e383be7a48be529b2ea501f2327cc0b098ffe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-runtime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 26KB
        • SHA256 8bdf3fe92340ba335488793b5e5d164b15ece06a6c361ccab7ac4a1bf6b06ff9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-stdio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 26KB
        • SHA256 e52fc89df7c449ba61f30d859efea9e8c04edf0078dde6c5e41394a7487f5404
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-crt-string-l1-1-0.dll
        • Size 26KB
        • SHA256 78477022e8f130912e2a8767be8fddb3963c429e9c67abd2f50cfdfae0ce5048
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-time-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-crt-time-l1-1-0.dll
        • Size 22KB
        • SHA256 d39c5aea2f04a6eaa7ec84ad9c9162fd64a1545bcc41121368594f8a1db07550
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-utility-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\api-ms-win-crt-utility-l1-1-0.dll
        • Size 22KB
        • SHA256 50966bb41ffc5c112bdf4e9717fbabd194f1843a84488dc229a71d3365ff45dd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\base_library.zip
        • Size 1.2MB
        • SHA256 ddfd0b272c66cb93783a712371140e9449938c6498b3cefd01c7914b5c4487fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keyauth.py
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\keyauth.py
        • Size 17KB
        • SHA256 65fffaf0e2490003986bf91f2c819f8c3ed3b2764c127bc74aaecb13d48971e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 ccfffddcd3defb8d899026298af9af43bc186130f8483d77e97c93233d5f27d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\libssl-3.dll
        • Size 776KB
        • SHA256 007142039f04d04e0ed607bda53de095e5bc6a8a10d26ecedde94ea7d2d7eefe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\python3.dll
        • Size 68KB
        • SHA256 fb975a606e7fbf74f64260e3f60c3490b4f74a183c0926fd6ed1ac4c52ac7b1c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python312.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\python312.dll
        • Size 6.6MB
        • SHA256 9a0e3435aaa680d868150f87ab3e388ad2eebc22f87e036155c7b4eda8cd2120
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        INSTALLER
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\setuptools\_vendor\importlib_metadata-8.0.0.dist-info\INSTALLER
        • Size 4B
        • SHA256 ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508
        • MD5 SHA1 SHA512
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI46562\ucrtbase.dll
        • Size 1.1MB
        • SHA256 c04daeba7e7c4b711d33993ab4c51a2e087f98f4211aea0dcb3a216656ba0ab7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download