Overview

overview

7

Static

static

3

2026-08-07...at.exe

windows10-2004-x64

7

2026-08-07...at.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    151s
  • max time network
    150s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    07/08/2026, 07:46

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-07_3a2f6ca4d8a97fc9395c8cd1e3ebb389_blankgrabber_coinminer_icedid_luca-stealer_njrat.exe
  • Size 76.1MB
  • Sample260807-jmgpkaef64
  • SHA256 6ae7cfa64be88126173d2831b3f81a8f73b278cbf54ae7f0695e47736ca5da0d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 11 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-07_3a2f6ca4d8a97fc9395c8cd1e3ebb389_blankgrabber_coinminer_icedid_luca-stealer_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-07_3a2f6ca4d8a97fc9395c8cd1e3ebb389_blankgrabber_coinminer_icedid_luca-stealer_njrat.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5708
    • C:\Users\Admin\AppData\Local\Temp\2026-08-07_3a2f6ca4d8a97fc9395c8cd1e3ebb389_blankgrabber_coinminer_icedid_luca-stealer_njrat.exe
      C:\Users\Admin\AppData\Local\Temp\2026-08-07_3a2f6ca4d8a97fc9395c8cd1e3ebb389_blankgrabber_coinminer_icedid_luca-stealer_njrat.exe
      2⤵
      • Loads dropped DLL
      PID:2708

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        111111_obf.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5708_768283_aPGMG8awXow\111111_obf.dll
        • Size 31.1MB
        • SHA256 2ef108cb4b7272f749253eac45ad0bacdcac9dec60f45284589c8de8df427a72
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5708_768283_aPGMG8awXow\VCRUNTIME140.dll
        • Size 116KB
        • SHA256 4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5708_768283_aPGMG8awXow\_bz2.pyd
        • Size 82KB
        • SHA256 706d4a0c26dd454538926cbb2ff6c64257c3d9bd48c956f7cabd6def36ffd13e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5708_768283_aPGMG8awXow\_ctypes.pyd
        • Size 122KB
        • SHA256 f20dfa748b878751ea1c4fe77a230d65212720652b99c4e5577bce461bbd9089
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5708_768283_aPGMG8awXow\_hashlib.pyd
        • Size 64KB
        • SHA256 4adfbbd6366d9b55d902fc54d2b42e7c8c989a83016ed707bd7a302fc3fc7b67
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5708_768283_aPGMG8awXow\_lzma.pyd
        • Size 155KB
        • SHA256 6216173194b29875e84963cd4dc4752f7ca9493f5b1fd7e4130ca0e411c8ac6a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5708_768283_aPGMG8awXow\_socket.pyd
        • Size 81KB
        • SHA256 5cc62aac52edf87916deb4ebbad9abb58a6a3565b32e7544f672aca305c38027
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5708_768283_aPGMG8awXow\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 05fe080eab7fc535c51e10c1bd76a2f3e6217f9c91a25034774588881c3f99de
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5708_768283_aPGMG8awXow\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python312.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5708_768283_aPGMG8awXow\python312.dll
        • Size 6.7MB
        • SHA256 789a42ac160cef98f8925cb347473eeeb4e70f5513242e7faba5139ba06edf2d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_5708_768283_aPGMG8awXow\select.pyd
        • Size 29KB
        • SHA256 af358285a7450de6e2e5e7ff074f964d6a257fb41d9eb750146e03c7dda503ca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download