Overview

overview

7

Static

static

3

2026-07-23...at.exe

windows10-2004-x64

7

2026-07-23...at.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    151s
  • max time network
    131s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    24/07/2026, 00:19

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-23_32335bd31d155f84512b44ebf5d4bc6d_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
  • Size 30.7MB
  • Sample260724-amarkszdld
  • SHA256 ec689b81b3e931c79a5fdd70158d68a044c8c06c828cc2ed541a2ad5817c4f09
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 26 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-23_32335bd31d155f84512b44ebf5d4bc6d_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-23_32335bd31d155f84512b44ebf5d4bc6d_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3880
    • C:\Users\Admin\AppData\Local\Temp\2026-07-23_32335bd31d155f84512b44ebf5d4bc6d_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-07-23_32335bd31d155f84512b44ebf5d4bc6d_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:756

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        LIBBZ2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\LIBBZ2.dll
        • Size 81KB
        • SHA256 25a4aae35dd89709620106db311af5bca7c868182b961e106a895ae14d2fc98a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _imaging.cp313-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\PIL\_imaging.cp313-win_amd64.pyd
        • Size 2.4MB
        • SHA256 010808cd1eb564aeaee8ba65ab2e20ae07f9bd9cbab8dba1d88931bc6842de0f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _imagingft.cp313-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\PIL\_imagingft.cp313-win_amd64.pyd
        • Size 1.9MB
        • SHA256 c830239b96cc467ba4c8e3f398f96fa803c2566b7fa6c7155f19ff1c6fcd991d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\_bz2.pyd
        • Size 35KB
        • SHA256 5a74a78c569981b07f9e5954617482e546c3ea6a6bcb8481b62828d2be1535f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\_ctypes.pyd
        • Size 136KB
        • SHA256 8d835c32650a6e10a60fcafcde07d66ded5ba4823599cd5c72d1774a3116390d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _elementtree.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\_elementtree.pyd
        • Size 76KB
        • SHA256 c033f625ca1b64f1c8e4f356e46b5d332e38243b5b57bdece33d235d3b5f05ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\_lzma.pyd
        • Size 47KB
        • SHA256 22f8741370b9636efc8ca57c85bd0f4db63388b6321c4bee1a60d4cefd44bee6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\_queue.pyd
        • Size 31KB
        • SHA256 581b8ef53bde8c19c0605eef85792afb615851695562872e8512aa5a73d5a3a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\_socket.pyd
        • Size 83KB
        • SHA256 e964ec21796e451fbdef7feaf33fce328dffd46567570af271b682e68ace5585
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        auto.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\_tcl_data\auto.tcl
        • Size 20KB
        • SHA256 2302234f123a10fef315aa50893bd349bc52201fa12f6dc7bc09fdfc8e84bf85
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cp1252.enc
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\_tcl_data\encoding\cp1252.enc
        • Size 1KB
        • SHA256 14df3ae30e81e7620be6bbb7a9e42083af1ae04d94cf1203565f8a3c0542ace0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        pkgIndex.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\_tcl_data\http1.0\pkgIndex.tcl
        • Size 735B
        • SHA256 420c4b3088c9dacd21bc348011cac61d7cb283b9bee78ae72eed764ab094651c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        init.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\_tcl_data\init.tcl
        • Size 24KB
        • SHA256 374e8e83d501dc0283d4b6cae60d96b46141048e5a57d1500dd379f966879f98
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pkgIndex.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\_tcl_data\opt0.4\pkgIndex.tcl
        • Size 608B
        • SHA256 bc4aff8132402e6244f497b3f849b6b30c328db8512a04e4c86c523a80f2fe68
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        package.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\_tcl_data\package.tcl
        • Size 22KB
        • SHA256 9edf9783fe26c85040dc849b7aed8350becb25144b6b2ce6068f58cfdf574f4a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tclIndex
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\_tcl_data\tclIndex
        • Size 5KB
        • SHA256 f832bc13238565d1427c463fdcacef0a93f4dc0352c0e3f35b573d9b11deaca5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tm.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\_tcl_data\tm.tcl
        • Size 11KB
        • SHA256 78e0d5fb77e51be0c99cdfdfef596c91b66ba1160c46c48a63266611bbcf26ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        button.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\_tk_data\button.tcl
        • Size 20KB
        • SHA256 2f013b643d62f08ddaaa1dea39ff80d6607569c9e1acc19406377b64d75ccf53
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        entry.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\_tk_data\entry.tcl
        • Size 17KB
        • SHA256 92fb2fe5b22cc697f9396d3681cf3d31c03598d7d8d1858b4b7ab976e9c80a5c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        icons.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\_tk_data\icons.tcl
        • Size 10KB
        • SHA256 4cab80ace4104a4169c9bd1fdb24d697889b984b91a290b69a481912c38a9fd4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        listbox.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\_tk_data\listbox.tcl
        • Size 14KB
        • SHA256 fdfd4cf3102d83bad3556d0e0086b5f320f74484babf90421cf526fd8b9fbeb0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        menu.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\_tk_data\menu.tcl
        • Size 37KB
        • SHA256 39e93a2bd75b9156235f3271ea02fd7cac82b542ae56df733cd7bd62a2c4207e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        panedwindow.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\_tk_data\panedwindow.tcl
        • Size 5KB
        • SHA256 4adf738b17691489c71c4b9d9a64b12961ada8667b81856f7adbc61dffeadf29
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pkgIndex.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\_tk_data\pkgIndex.tcl
        • Size 376B
        • SHA256 1390f260ea7af5b0779549fa29615530ff9e3bc202806d2024ac644b1fac5dbc
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        scale.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\_tk_data\scale.tcl
        • Size 8KB
        • SHA256 423546933269faec913001f2bce30bbdbce3927dc9dd96fe74813e7ffb27cfb5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        scrlbar.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\_tk_data\scrlbar.tcl
        • Size 12KB
        • SHA256 189e7ee4b67861001c714a55880db34acf7d626a816e18b04b232af9e6e33e81
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spinbox.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\_tk_data\spinbox.tcl
        • Size 15KB
        • SHA256 a804c83029e04e6bd34d335260f388890d7657deb544173858bd05018d73ab01
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        text.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\_tk_data\text.tcl
        • Size 33KB
        • SHA256 fd12bca3c7dcedf3fc6640902af1c9f48bc5df27c9153edaec15413f1581e4a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tk.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\_tk_data\tk.tcl
        • Size 23KB
        • SHA256 779ce7099675d1fcdaa8a53df58cf5b2da6d5f03cdbf7a8c318860bd01a6e46f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _tkinter.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\_tkinter.pyd
        • Size 66KB
        • SHA256 332badfe1de47499f296b79d109dd12238a59d584c9468a86b0fa89ed747be87
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\base_library.zip
        • Size 1.3MB
        • SHA256 99c39f4ec44392436a0bb9f66426fe4c99de59d76b3efb65cd01d03580550cec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ffi.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\ffi.dll
        • Size 39KB
        • SHA256 eb22fc95044ce939910d41857445bd0ecc4fc4d810ba30cc6b5f7f55b48ac8ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libexpat.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\libexpat.dll
        • Size 406KB
        • SHA256 e5a40230f8de81afa595b30db3dffe6583b4a3c92517d40a4f9e43396a890ad2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        liblzma.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\liblzma.dll
        • Size 193KB
        • SHA256 84c81962664426eefdc5ffcb8dc022c3a63c3fac737b9396e23219c2cfd38e2e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pyexpat.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\pyexpat.pyd
        • Size 65KB
        • SHA256 9a74c6e1b7f22ea40066e001e7449bcc3a9202848fe674f1e7f66ac92126dd7b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python313.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\python313.dll
        • Size 6.8MB
        • SHA256 266889b30355dc5a03dd5e15b0a43966e7a58e33c9916da22c583169d9aab2e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\select.pyd
        • Size 29KB
        • SHA256 b19633dbb9aac2974ee67e90e9a546a2980c95ad9478bf1d52839b669ad2b3d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tcl86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\tcl86t.dll
        • Size 1.8MB
        • SHA256 65ecaa0f9c4eb47ff20c41f4428d3a90d4c664416dd4b6a60cecfa8070ba66b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msgcat-1.6.1.tm
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\tcl8\8.5\msgcat-1.6.1.tm
        • Size 33KB
        • SHA256 c29589596069ef698f1394262d019f5708a05a5211d8feceaa4c3ab74f5d7d9a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tk86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\tk86t.dll
        • Size 1.5MB
        • SHA256 14e23d8c2455f0fcdd0eeec883d00082a0afd9d33c413a4bec93de5bd69e510c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\ucrtbase.dll
        • Size 1.1MB
        • SHA256 91d027417ff2301b7135e864a5df6693488f8412ff87040f4897e0e03bc2577b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zlib.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI38802\zlib.dll
        • Size 97KB
        • SHA256 8dbfd6ef7374a831158bddccb79e3d5665e9625c81af557f15b4150b7877f687
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/756-1098-0x0000017757930000-0x0000017757931000-memory.dmp
        Download