Analysis
- max time kernel
150s - max time network
144s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/08/2026, 03:54
Behavioral task
behavioral1
Sample
2026-08-10_db9caa13cd3250b914b5bc0dd0ee9a24_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_db9caa13cd3250b914b5bc0dd0ee9a24_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-08-10_db9caa13cd3250b914b5bc0dd0ee9a24_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
- Size 8.1MB
- Sample260810-egekss1akh
- SHA256 3c771353c1b02ae89b2f8456677d28a6d168ab247c670fc5f0f747eb30d332ce
- MD5 db9caa13cd3250b914b5bc0dd0ee9a24
- SHA1 d4ab9138779f5c35cdfb9675de49c80664786eb2
- SHA512 2b726aa92d6339c228fa8c371ebbe9566903b54dfdc52060e7bc3550f23dd68a9062eb50afca9d6488d28c67e822f533ba7afe23b8f866087fb20dd095d3a2ae
- SSDEEP 196608:oYototbW897GLPHMe81SF2RPUewytKZ21HsMRqxbRgFZDU:oYL16PsZg2Ke3K41HsMRqxbYZw
- TLSH T15786339DE3F008EAD8B7553F6E656052E3B1B42147A1C9DF0BA0832A5F572FA2C39354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 5 IoCs
pid Process 4236 2026-08-10_db9caa13cd3250b914b5bc0dd0ee9a24_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe 4236 2026-08-10_db9caa13cd3250b914b5bc0dd0ee9a24_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe 4236 2026-08-10_db9caa13cd3250b914b5bc0dd0ee9a24_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe 4236 2026-08-10_db9caa13cd3250b914b5bc0dd0ee9a24_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe 4236 2026-08-10_db9caa13cd3250b914b5bc0dd0ee9a24_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 4644 wrote to memory of 4236 4644 2026-08-10_db9caa13cd3250b914b5bc0dd0ee9a24_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe 90
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-10_db9caa13cd3250b914b5bc0dd0ee9a24_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-10_db9caa13cd3250b914b5bc0dd0ee9a24_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:4644 -
C:\Users\Admin\AppData\Local\Temp\2026-08-10_db9caa13cd3250b914b5bc0dd0ee9a24_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-10_db9caa13cd3250b914b5bc0dd0ee9a24_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"2⤵
- Loads dropped DLL
PID:4236
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\_MEI46442\VCRUNTIME140.dll
- Size 117KB
- SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
- MD5 32da96115c9d783a0769312c0482a62d
- SHA1 2ea840a5faa87a2fe8d7e5cb4367f2418077d66b
- SHA512 616c78b4a24761d4640ae2377b873f7779322ef7bc26f8de7da0d880b227c577ed6f5ed794fc733468477b2fcdb7916def250e5dc63e79257616f99768419087
- SSDEEP 1536:Z9TXF5YXWbj8qr51XlN+dULTCe1IGhKWyxLiyaXYaNxoecbdhUoaLjTz164zEd:ZEnsvReGsWyxLizXFkecbd1aPTzW
- TLSH T10DC38C8572A002FBD16AC274C1A36A17FB75B94487B0A7CF03B58A650F53BE09E3D356
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI46442\_bz2.pyd
- Size 85KB
- SHA256 082a761a280b08afecf6fb0509050ffbf7e87d1638ca49466b8b3eb4c85009b4
- MD5 b831ff0ab5f28a1f3bae6842896d45ff
- SHA1 e96c4dc15ef8f55fa47eef0f5e3d4a184eeef764
- SHA512 bdac51598e349a96aa399f8d6fc6ed46b8ff797bb70b372290a941581f4b63318df9578a557a297873b827b2de2eec8cc14e3c1241cf65f3e71f5653d7b034da
- SSDEEP 1536:jGNqB8z7DyEXkmNf0/ixk+x5dxNkP88l3ub8zMDIGQIS3VvcycA89JfIYhE:CNqB8zSEJUoZlTkUGK8zJGQIS3VLV
- TLSH T189838D86F36552B6F99FD1B846840793F734BB860750A3AFF148829A3F13BD06E5C225
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI46442\_lzma.pyd
- Size 157KB
- SHA256 2376cd374ce8c2c5ecf573226e563a96975599533f86a5f5eba5bdb705e341bb
- MD5 d412fca808a8dd9178ccf8bd9517859b
- SHA1 6088ee0ee94f6a245bac0a0d1c0e664ca630cc07
- SHA512 35afe64a19ff6737b662b9359e591bbb00c169e83609dff1c2ab1fac829316200b8a121d1bedb28bef832e7968a95e01986d20f8cb0d511e7b0d794010484e8d
- SSDEEP 3072:M0m6DHDbBwiZfxA/VcNBznfx9mNoX3mfnbOQISI1jmT:MTCHDjfDNJpYOGfbO3+
- TLSH T1E8F35C86B394F0E6F7228C38D6614F57E7F5791A0320929A01CC976D2B1FB659A2F313
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI46442\_zstd.pyd
- Size 491KB
- SHA256 8f04a54778d4f21202f1bb9cfd5d080c5c5022158016dcaaf5908f7e2350270c
- MD5 225e0462bf8337155e78b36e3cf9fa79
- SHA1 ae944f73defa8ac5ddb3069fbb4a9da5ecafef2c
- SHA512 815201438564f8c9d57b0b8974d4b82d10bcd313e41277d85f290c0a3a94b9be8d31b5436da8704cb342f19fe68d258ee026642eca969bbb6518acd79ddb05b5
- SSDEEP 12288:MPm5BlLPg/FcxTbwWo2iD4xjnsTrWl93W6Ct0:MPm5BNg/FcxTUWo2i0x7C0
- TLSH T1FAB49D43F29943EDE17BC4B8CF465A53FBB1780B1214564B93A5CB993F07B309A6A309
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI46442\base_library.zip
- Size 1.3MB
- SHA256 69d48090dac915982f02e544caf6ac175b2e51bcf4b4cb9c389226989ec75aa5
- MD5 a592d212c4a15edeb03e028afa7774e7
- SHA1 59f457ba5b2634f126e7e56d4cc8c4fd82198e37
- SHA512 672d4659782114678468c9e43878eb7e9e35ba0580c0da991c0c0fa4ed13239198d2fa1e455f37286bc8c484c7cbe0e8513f42bc370fb55356d04fcf81ea3f4b
- SSDEEP 24576:plb9u4DmFuUF0duLiQeOdP2m2dfAtPRpAx:tuxuUF0dH/oPRy
- TLSH T13B552AA1B9917967FEC9F37A35775A0CA715C0109B20D303B4A88DAC6FDF260AE158DC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI46442\python314.dll
- Size 6.4MB
- SHA256 7ffe3ab11342db03cc18b026f27485c0f74f5bf10f239f1f6573394900596394
- MD5 23b7bec4bb8cf109503029b50f5eadd5
- SHA1 a5cb46bedfe2be49ae75bf0a95ab646c3256aee7
- SHA512 d687ea3c15b7fdd08ecc29e73e5310195483bae18c7b49895b0b855b0df13b0b6955d75022f842725b17e3b2ef9e922d4eb90e8819f2c8be84890d7ee49a92a3
- SSDEEP 98304:ctcc7EmUp55MA3l5vHi+LPL4G8hvGHDMiESkYD:cWc7EmUp55MMPHi9NikYD
- TLSH T1DC669E26737501A4D8BB8035C9074687DBB1BC04AB30D34B49A4B6DA3F773635BAEB85
- MD5 SHA1 SHA512 SSDEEP TLSH