Analysis
- max time kernel
150s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
08/08/2026, 08:02
General
- Target 2026-08-08_67a38a0d26c424cb5070c01e55a8daa6_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
- Size 6.3MB
- Sample260808-jw7mcacd88
- SHA256 b02505a4ce85053ea8957789bcae46e00dc32f45f615286452214873126409fd
Malware Config
Signatures
- Loads dropped DLL 10 IoCs
- UPX packed file 26 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_67a38a0d26c424cb5070c01e55a8daa6_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-08_67a38a0d26c424cb5070c01e55a8daa6_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_67a38a0d26c424cb5070c01e55a8daa6_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-08_67a38a0d26c424cb5070c01e55a8daa6_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"2⤵
- Loads dropped DLL
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
VCRUNTIME140.dll
_bz2.pyd
_decimal.pyd
_hashlib.pyd
_lzma.pyd
_socket.pyd
_ssl.pyd
base_library.zip
libcrypto-3.dll
libssl-3.dll
python311.dll
select.pyd
unicodedata.pyd
memory/248-40-0x00007FFDE6370000-0x00007FFDE637D000-memory.dmp
memory/248-46-0x00007FFDE49A0000-0x00007FFDE49CD000-memory.dmp
memory/248-30-0x00007FFDE6100000-0x00007FFDE6119000-memory.dmp
memory/248-17-0x00007FFDCDA90000-0x00007FFDCE082000-memory.dmp
memory/248-36-0x00007FFDCD560000-0x00007FFDCDA89000-memory.dmp
memory/248-38-0x00007FFDE4960000-0x00007FFDE4979000-memory.dmp
memory/248-32-0x00007FFDE49A0000-0x00007FFDE49CD000-memory.dmp
memory/248-44-0x00007FFDD8DB0000-0x00007FFDD8E7D000-memory.dmp
memory/248-34-0x00007FFDE4980000-0x00007FFDE4994000-memory.dmp
memory/248-45-0x00007FFDCDA90000-0x00007FFDCE082000-memory.dmp
memory/248-42-0x00007FFDE1730000-0x00007FFDE1763000-memory.dmp
memory/248-47-0x00007FFDE4980000-0x00007FFDE4994000-memory.dmp
memory/248-48-0x00007FFDCD560000-0x00007FFDCDA89000-memory.dmp
memory/248-49-0x00007FFDE4960000-0x00007FFDE4979000-memory.dmp
memory/248-59-0x00007FFDE1730000-0x00007FFDE1763000-memory.dmp