Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    08/08/2026, 20:50

General

  • Target
    2026-08-08_47db668381f08eeada8315ee2e3510ed_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
  • Size 9.9MB
  • Sample260808-zmy7lsvbna
  • SHA256 07b56aba97b3b54f53f050161caa131c019ad5ccb1defbb25b597f582839b606
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 18 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-08_47db668381f08eeada8315ee2e3510ed_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-08_47db668381f08eeada8315ee2e3510ed_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2804
    • C:\Users\Admin\AppData\Local\Temp\2026-08-08_47db668381f08eeada8315ee2e3510ed_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-08-08_47db668381f08eeada8315ee2e3510ed_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
      2⤵
      • Loads dropped DLL
      PID:4800

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _asyncio.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\_asyncio.pyd
        • Size 71KB
        • SHA256 675587b1155c875ab27e24302d53f38e41febd3c080bc190c3e4ffbdb51fe76b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\_bz2.pyd
        • Size 84KB
        • SHA256 b3dd7cea6d03342252834cebcc814af37d850b86d0627fa22b7f6990882f2f8b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ctypes.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\_ctypes.pyd
        • Size 130KB
        • SHA256 dfa65498c77e71f038883337d2b5ffd92508489e79e6ee5e96ddec4ecf2a7fa1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _decimal.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\_decimal.pyd
        • Size 276KB
        • SHA256 f55d81378a3261a7073fb71aee674152265b6f24ba6f375f9b939d5a117d8e6b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _hashlib.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\_hashlib.pyd
        • Size 67KB
        • SHA256 1a3010b06c2fcd625dece3dd0883ca060e98b94adc062b06cb1a671cfc3b5caf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _lzma.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\_lzma.pyd
        • Size 155KB
        • SHA256 f20be6a9fee8fb5d53170c4bc24a39b48d3c0ccbe8e2000e60ff7d65b77c6ea1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _multiprocessing.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\_multiprocessing.pyd
        • Size 37KB
        • SHA256 6c4ca996eafc99aeb246d25b5a9499d01488b643dcdabee6b48137f179b3deef
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _overlapped.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\_overlapped.pyd
        • Size 56KB
        • SHA256 626675dc9fc5c74beb72cd278322a8313b68b22161e34473f8b951c238e72185
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _queue.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\_queue.pyd
        • Size 34KB
        • SHA256 1e349a13913370369059a4ae5951157112b5eba53ed4389c18ffc5e00af1a037
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-core-console-l1-1-0.dll
        • Size 22KB
        • SHA256 5bf7ea7c2e9fbb4434723e999b5880d8163fa8f4df8331b159087aeee9dc074d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-core-datetime-l1-1-0.dll
        • Size 22KB
        • SHA256 a800cc238cdfd30817bbf353f0643c525dea47f50ada2362c2f529059545f295
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-core-debug-l1-1-0.dll
        • Size 22KB
        • SHA256 aa5e12704fa1fdb4cb5f569959fbe4718c91a522604867998764ef44537d6985
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 22KB
        • SHA256 facad07a63c019b23acef1564b1230953237fec6751bc4887904cee7f43dcf8f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-fibers-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-core-fibers-l1-1-0.dll
        • Size 22KB
        • SHA256 52220a8c65a8f3f985c3a903a645f342f75453fc96547c1602563c6ed2c6ea36
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-fibers-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-core-fibers-l1-1-1.dll
        • Size 22KB
        • SHA256 1604d333c10e80bf390ac170b173e5d8699bcec4ade68d304f395d4c557df702
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-core-file-l1-1-0.dll
        • Size 26KB
        • SHA256 5f44058b40804bd49b1d6b854c6b1b59b8d1668d1ee79d956bdc8c3fa493b555
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-core-file-l1-2-0.dll
        • Size 22KB
        • SHA256 85ff02a6c8e671e164b2a3dfcad2dfd67fdd4253ca2b7dfcc7b90158dc49c974
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-core-handle-l1-1-0.dll
        • Size 22KB
        • SHA256 702b4262403dbe601c90dccb976600f016b9a8fdf203dbe7151345864f3191c5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-core-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 3e3a3bce7ff626673275d6181e95b6d66cf6ea99cade8a2d775789cd21f75c02
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 22KB
        • SHA256 02334823ef2d09d3e8f9cc4d05f414b3a2b5955b0250ee99dbac6f597dc65c72
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 22KB
        • SHA256 fcc460f7f03d92920f08d142c8a6e2bfb189b7abbe74267b6273c70e03b6e906
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-core-localization-l1-2-0.dll
        • Size 22KB
        • SHA256 e11d146273341e4046b2e1b79e4ad3876c77e7c450b77e5a435de818de169996
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-core-memory-l1-1-0.dll
        • Size 22KB
        • SHA256 65d417eb8e938eed52405332905e9e2332efda5b9b706868dbf5249a78b4045b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 22KB
        • SHA256 a9790e42f7516323ba0f135a6d07768fc9f11a14ee8100f8e73282ba356f6476
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 22KB
        • SHA256 5c8e539604f15dd88a62ff7cbdc7d59c302397cb353dc759c0f1d16b54db0c89
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 22KB
        • SHA256 d35f6d321693900a75c784766c87780849bf1bbe176d3892e2693859be57f4a5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 22KB
        • SHA256 45c3ecefa2ca9b2372a043a269e3959cbcacf6c9a658fad430c753bc5176d396
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-core-profile-l1-1-0.dll
        • Size 22KB
        • SHA256 b1e967f7520a5de9e4af1e2b338bf97b566a674de123cdec676b742305966f38
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 22KB
        • SHA256 61b4e3d9b5a8cb3090413771f2a5e6996d0284b3d1db7d8f1446fbb067cc8278
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-core-string-l1-1-0.dll
        • Size 22KB
        • SHA256 c8abebb85cee4bb344bfe4a3ab7d3ebf1c97b3d2c9174cca561ae4fe0ef94aa0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-core-synch-l1-1-0.dll
        • Size 22KB
        • SHA256 126096d5f9fae05b267e5d2a0dbcb1132afd66066dd0b0ed897ca81abfbc93cb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-core-synch-l1-2-0.dll
        • Size 22KB
        • SHA256 56856646592653b44248d31fdbbf47cd016916d1e974bc7206e6ca333e24f592
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 22KB
        • SHA256 6360946df9eb2bd16078b30f94872f5721af60feeb74c527d56ea301d1b8d48a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-core-sysinfo-l1-2-0.dll
        • Size 22KB
        • SHA256 3907bebe5ea02158c359280c55d1c4ec555107b4f74c8db80d33e133183ce498
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-core-timezone-l1-1-0.dll
        • Size 22KB
        • SHA256 3ee773561d1cd9866f28c617daafd57456f2fa35eda77b5a5805014668ab5c79
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-core-util-l1-1-0.dll
        • Size 22KB
        • SHA256 bbf656e66e536bc94250d70d5138c1208614252748e1712622530b4df6b279ae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-crt-conio-l1-1-0.dll
        • Size 22KB
        • SHA256 154fb9cd854743fc92008601c21348834874ad306aaa1e8456bf11403c442146
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-crt-convert-l1-1-0.dll
        • Size 26KB
        • SHA256 128ff7ef0c85ef4d8c94cd76424c8c9fd071c8c958232c6268e24d0fe94adee6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-crt-environment-l1-1-0.dll
        • Size 22KB
        • SHA256 d4c7da2bbb136dde18db53dbedbbc2d5972cd32fc9894cfd59e0abafa5677261
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 22KB
        • SHA256 de0acf4de3e8895a14715c16144ac44e2a5dc560c56798e8acc8efa2ebff79fc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-crt-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 d28c6647225ac052a4f1e6c32d2612b66711c50e17216e4c627768fe1f4f8567
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-crt-locale-l1-1-0.dll
        • Size 22KB
        • SHA256 27dfaa973e949c1faac2ad53bdb0889fff0df579ddf8cf48a876feed7b7564a3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-crt-math-l1-1-0.dll
        • Size 30KB
        • SHA256 099ebd8e04deb428054525a21e62c3ca5c707c4dd96c6a53a71a79c322c1eccc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-crt-process-l1-1-0.dll
        • Size 22KB
        • SHA256 29a24df5c296ce166339866d4f62c581add7348767c8004d7c1ad272b36190d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 26KB
        • SHA256 beccba8eadb5f0a18d2fb251c8d6f7819880def312ee909b1884a795ea348206
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 26KB
        • SHA256 bcee4dd27d4f72801aee5365b484cdf30659af606ff310ad9ace49a3df849dd4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-crt-string-l1-1-0.dll
        • Size 26KB
        • SHA256 f8d65251c13a067c38c71be269f1c209ccb1052fee62b67e0c3dfde88cdf25e7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-crt-time-l1-1-0.dll
        • Size 22KB
        • SHA256 c1a43c118ae50ab592d53f7f9d15e8851c74941101a7397ac1909d581e3dcc39
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\api-ms-win-crt-utility-l1-1-0.dll
        • Size 22KB
        • SHA256 2ec6cb625ec4879fdf4057f3959d688d56c0c56711b2b17e78d370e9a9eaed0b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\base_library.zip
        • Size 1.3MB
        • SHA256 077203a2fbbcacdf497586a3d40c10e0decf8efdd6893fff74be93e8ba5a4919
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypto-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 ccfffddcd3defb8d899026298af9af43bc186130f8483d77e97c93233d5f27d7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libffi-8.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libssl-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\libssl-3.dll
        • Size 776KB
        • SHA256 007142039f04d04e0ed607bda53de095e5bc6a8a10d26ecedde94ea7d2d7eefe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pyexpat.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\pyexpat.pyd
        • Size 201KB
        • SHA256 719dc29fee125f0d5026319da9a3001c130c84419db7ef7c5473fb496d56cfc2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python313.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\python313.dll
        • Size 5.8MB
        • SHA256 41ec4fc4e5bc8b207258590238f7f050b13fdfee84c4a7b1ecff6e945d031a10
        • MD5 SHA1 SHA512 SSDEEP TLSH

        select.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\select.pyd
        • Size 32KB
        • SHA256 9cc1ef0264060099503592db57ee7d7c1f8d6bea689b2ed125919c7a30b7ab7f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ucrtbase.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\ucrtbase.dll
        • Size 1.3MB
        • SHA256 5e7709a6b71bb818260b6f05c5bb3b6ca0c3ca9bc2f58c6242c1cd9d826d0079
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unicodedata.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI28042\unicodedata.pyd
        • Size 695KB
        • SHA256 1989628f16052f9123c5cf603e96490a75fde6228315457556f96a838bf9e904
        • MD5 SHA1 SHA512 SSDEEP TLSH