Overview

overview

7

Static

static

3

2026-08-09...at.exe

windows10-2004-x64

7

2026-08-09...at.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    09/08/2026, 11:43

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-09_342820b2934924e208964f204db13ff9_blankgrabber_glassworm_icedid_luca-stealer_neverquest_njrat.exe
  • Size 102.4MB
  • Sample260809-nv3dfsxbkd
  • SHA256 df4ba549323f37450aee91bbe58971c98eac23d9a8efe630390d33360e4e333e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-09_342820b2934924e208964f204db13ff9_blankgrabber_glassworm_icedid_luca-stealer_neverquest_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-09_342820b2934924e208964f204db13ff9_blankgrabber_glassworm_icedid_luca-stealer_neverquest_njrat.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3788
    • C:\Users\Admin\AppData\Local\Temp\2026-08-09_342820b2934924e208964f204db13ff9_blankgrabber_glassworm_icedid_luca-stealer_neverquest_njrat.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-08-09_342820b2934924e208964f204db13ff9_blankgrabber_glassworm_icedid_luca-stealer_neverquest_njrat.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      PID:436
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x4e0 0x4d4
    1⤵
      PID:2108

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          VCRUNTIME140.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\VCRUNTIME140.dll
          • Size 117KB
          • SHA256 36585912e5eaf83ba9fea0631534f690ccdc2d7ba91537166fe53e56c221e153
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          VCRUNTIME140_1.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\VCRUNTIME140_1.dll
          • Size 48KB
          • SHA256 82a2f9ae1e6146ae3cb0f4bc5a62b7227e0384209d9b1aef86bbcc105912f7cd
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _asyncio.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\_asyncio.pyd
          • Size 69KB
          • SHA256 dbeae7cb6f256998f9d8de79d08c74d716d819eb4473b2725dbe2d53ba88000a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _bz2.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\_bz2.pyd
          • Size 82KB
          • SHA256 fc3b481684b926350057e263622a2a5335b149a0498a8d65c4f37e39dd90b640
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _cffi_backend.cp313-win_amd64.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\_cffi_backend.cp313-win_amd64.pyd
          • Size 176KB
          • SHA256 d5b09da2e726b4e90cf0edad5d2a0ec52f369dfd060e14d3807a32b2205031fa
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _ctypes.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\_ctypes.pyd
          • Size 128KB
          • SHA256 f63c6c7e71c342084d8f1a108786ca6975a52cefef8be32cc2589e6e2fe060c8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _decimal.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\_decimal.pyd
          • Size 271KB
          • SHA256 b715d1c18e9a9c1531f21c02003b4c6726742d1a2441a1893bc3d79d7bb50e91
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _elementtree.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\_elementtree.pyd
          • Size 130KB
          • SHA256 b43e0a90e4a4aa4fb93a8a6a88cb79e1e670eb24fe5655171e743a32db07a471
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _hashlib.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\_hashlib.pyd
          • Size 62KB
          • SHA256 838d5c8b7c3212c8429baf612623abbbc20a9023eec41e34e5461b76a285b86c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _lzma.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\_lzma.pyd
          • Size 154KB
          • SHA256 d080eabd015a3569813a220fd4ea74dff34ed2a8519a10473eb37e22b1118a06
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _multiprocessing.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\_multiprocessing.pyd
          • Size 34KB
          • SHA256 59134b754c6aca9449e2801e9e7ed55279c4f1ed58fe7a7a9f971c84e8a32a6c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _overlapped.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\_overlapped.pyd
          • Size 54KB
          • SHA256 404353d7b867749fa2893033bd1ebf2e3f75322d4015725d697cfa5e80ec9d0f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _queue.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\_queue.pyd
          • Size 32KB
          • SHA256 b9cf502dadcb124f693bf69ecd7077971e37174104dbda563022d74961a67e1e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _socket.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\_socket.pyd
          • Size 81KB
          • SHA256 35246b04c6c7001ca448554246445a845ce116814a29b18b617ea38752e4659b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _ssl.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\_ssl.pyd
          • Size 177KB
          • SHA256 63ae2fefbfbbbc6ea39cde0a622579d46ff55134bc8c1380289a2976b61f603e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _tkinter.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\_tkinter.pyd
          • Size 64KB
          • SHA256 a6851d7c25a1216d2c8fa5c1d2e9eca3d0392d60e3b7441ad9f66c23ffdd2f08
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _uuid.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\_uuid.pyd
          • Size 25KB
          • SHA256 f9d5008f0772aa0720bc056a6ecd5a2a3f24965e4b470b022d88627a436c1ffe
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _wmi.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\_wmi.pyd
          • Size 37KB
          • SHA256 6435c679a3a3ff4f16708ebc43f7ca62456c110ac1ea94f617d8052c90c143c7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _zoneinfo.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\_zoneinfo.pyd
          • Size 48KB
          • SHA256 fa1d5ece7de09df633ef1051c6719302cabd3622bca6756005046b8c2919818d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          base_library.zip
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\base_library.zip
          • Size 1.3MB
          • SHA256 27169fbab02a28f6fd89b71cfa1e234b0e0cfb341d8512a20477c9f5854ea8d4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          __init__.py
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\cv2\__init__.py
          • Size 6KB
          • SHA256 957a91bfd98ffb07a10cd789b7c5c46806568476b61e34c7ad56a00092b981a5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          config-3.py
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\cv2\config-3.py
          • Size 748B
          • SHA256 de28c7b5213cca148f09469916584611b3d66c1c8c432880259d6a3a92380213
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          config.py
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\cv2\config.py
          • Size 123B
          • SHA256 d9e401b9a67304d69c48a494a485d106b534e02bf5776211c09f09bd671b295d
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          load_config_py3.py
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\cv2\load_config_py3.py
          • Size 271B
          • SHA256 ff583a5874be8f848e73c2f61b3a71680995926479c9bc436e6565c5cce7ca07
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          version.py
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\cv2\version.py
          • Size 96B
          • SHA256 a601cee22696ce403eb41087da3fc8fcfe87e0afa5ad4bea69c30b86b147589c
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          libcrypto-3.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\libcrypto-3.dll
          • Size 5.0MB
          • SHA256 4e5d5d20d6d31e72ab341c81e97b89e514326c4c861b48638243bdf0918cfa43
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libffi-8.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\libffi-8.dll
          • Size 38KB
          • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libssl-3.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\libssl-3.dll
          • Size 774KB
          • SHA256 2e4d35b681a172d3298caf7dc670451be7a8ba27c26446efc67470742497a950
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libscipy_openblas64_-43e11ff0749b8cbe0a615c9cf6737e0e.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\numpy.libs\libscipy_openblas64_-43e11ff0749b8cbe0a615c9cf6737e0e.dll
          • Size 19.4MB
          • SHA256 634687ca5fedef76e784d8c54fc4ba2f965a44c0b60d754c49174589deab8157
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          msvcp140-263139962577ecda4cd9469ca360a746.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\numpy.libs\msvcp140-263139962577ecda4cd9469ca360a746.dll
          • Size 561KB
          • SHA256 a4c2229bdc2a2a630acdc095b4d86008e5c3e3bc7773174354f3da4f5beb9cde
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _multiarray_umath.cp313-win_amd64.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\numpy\_core\_multiarray_umath.cp313-win_amd64.pyd
          • Size 4.0MB
          • SHA256 ccb633399c1fa554caed0911f0cf7af0fa35a5b06c649fa1890c9a49596576fb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          _umath_linalg.cp313-win_amd64.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\numpy\linalg\_umath_linalg.cp313-win_amd64.pyd
          • Size 105KB
          • SHA256 042a396db2ef521c0ccbb00eb562677f57bce66c744ad5ea84a016d92124a028
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          pyexpat.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\pyexpat.pyd
          • Size 196KB
          • SHA256 d3e81017b4a82ae1b85e8cd6b9b7eb04d8817e29e5bc9ece549ac24c8bb2ff23
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          python3.DLL
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\python3.DLL
          • Size 68KB
          • SHA256 a5c6a329698490a035133433928d04368ce6285bb91a9d074fc285de4c9a32a4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          python313.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\python313.dll
          • Size 5.8MB
          • SHA256 0c0a66505093b6a4bb3475f716bd3d9552095776f6a124709c13b3f9552c7d99
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          select.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\select.pyd
          • Size 30KB
          • SHA256 78e5994c29d8851f28b5b12d59d742d876683aea58eceea1fb895b2036cdcdeb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Lorem ipsum.txt
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\setuptools\_vendor\jaraco\text\Lorem ipsum.txt
          • Size 1KB
          • SHA256 37fedcffbf73c4eb9f058f47677cb33203a436ff9390e4d38a8e01c9dad28e0b
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          tcl86t.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\tcl86t.dll
          • Size 1.7MB
          • SHA256 c861f39ad0f4fc7f3875850925f61442bff2bc1839bbbb3584a63bc4d6e5cea6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          tk86t.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\tk86t.dll
          • Size 1.5MB
          • SHA256 6425bf57abcc1dfbbe8662b1956883ae0c5ab8c2d9314e19692b3d86babc242c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          unicodedata.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\unicodedata.pyd
          • Size 693KB
          • SHA256 2693c7ee4fba55dc548f641c0cb94485d0e18596ffef16541bd43a5104c28b20
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          zlib1.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI37882\zlib1.dll
          • Size 142KB
          • SHA256 8c2ed3e1a90c9b0e3ef844be20e1af791ae8a1b665d4731162404f0eee1697dc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          memory/436-1186-0x00007FFAF5250000-0x00007FFAF65B6000-memory.dmp
          Download

          memory/436-1187-0x00007FFAF5250000-0x00007FFAF65B6000-memory.dmp
          Download