Analysis

  • max time kernel
    150s
  • max time network
    143s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    18/08/2026, 00:41

General

  • Target
    2026-08-17_22354f373e7dcc8fb76acf1084aeacdf_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
  • Size 80.8MB
  • Sample260818-a15twashna
  • SHA256 035acb3ddd45fdceb6bc9f63e459108740c2cde0c6703014464beae8c36b5785
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 35 IoCs
  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-17_22354f373e7dcc8fb76acf1084aeacdf_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-17_22354f373e7dcc8fb76acf1084aeacdf_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4900
    • C:\Users\Admin\AppData\Local\Temp\2026-08-17_22354f373e7dcc8fb76acf1084aeacdf_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-08-17_22354f373e7dcc8fb76acf1084aeacdf_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:3420
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "ver"
        3⤵
        • Executes a command shell one-liner
        PID:5772

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\VCRUNTIME140.dll
        • Size 116KB
        • SHA256 4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\_bz2.pyd
        • Size 82KB
        • SHA256 1be51ef2b5acbe490217aa1ff12618d24b95df6136c6844714b9ca997b4c7f9b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ctypes.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\_ctypes.pyd
        • Size 121KB
        • SHA256 3d43869a4507ed8ece285ae85782d83bb16328cf636170acb895c227ebb142ac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _lzma.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\_lzma.pyd
        • Size 155KB
        • SHA256 663f1087c2ed664c5995a3ffa64546d2e33a0fce8a9121b48cc7c056b74a2948
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-core-console-l1-1-0.dll
        • Size 21KB
        • SHA256 87c8e57e1fc1bff7cf9dfff06af1bdd43a67652ba96d4c35d14e5f22bd17164f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-core-datetime-l1-1-0.dll
        • Size 21KB
        • SHA256 fdb29afc4ec3585586d8415de087d6c6993c5a1171f57dd5185389eca33ba948
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-core-debug-l1-1-0.dll
        • Size 21KB
        • SHA256 4626ba7d6181906a130cb32a965c33d8f41940b23ab2946b51da3eda3f5a1d99
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 21KB
        • SHA256 8289c551e17e2648bc5384e7ce4787ebea452c10e799e6da96cec930885c7584
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-fibers-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-core-fibers-l1-1-0.dll
        • Size 21KB
        • SHA256 acd898771c674e63b0f3e67d98826c93143b391ae8c58563c2da7b98475ced14
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-core-file-l1-1-0.dll
        • Size 25KB
        • SHA256 22d8959cc8e03078e28b2140911803368993cf4750743cb5e4011fc469dc1dbd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-core-file-l1-2-0.dll
        • Size 21KB
        • SHA256 3b114c3944cb6e0c4f43d4a90248f8bf0ee0230a2096b788f2a2b3f12b59c458
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-core-file-l2-1-0.dll
        • Size 20KB
        • SHA256 f957a4c261506484b53534a9be8931c02ec1a349b3f431a858f8215cecfec3f7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-core-handle-l1-1-0.dll
        • Size 21KB
        • SHA256 950a9c745e331fa77a46696cc85cdc6556597428392e65689acaca3177104e3e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-core-heap-l1-1-0.dll
        • Size 21KB
        • SHA256 8c0df823dc018907436f1bc964b1073f41241fb1fad633f75997b9324d311f65
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 21KB
        • SHA256 c0188b846ca54fd398650af690b55d713c06b0c2570c3d2304539ec15d4667cf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 21KB
        • SHA256 7c66dee567ba583d242f87d442caf38c0ce95bb1d36cd2bd74825c44e54d9078
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-core-localization-l1-2-0.dll
        • Size 21KB
        • SHA256 4ea560dbe8a2970388fb0d738b47e65caa417a2f187e3a9827b696ce01ab41eb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-core-memory-l1-1-0.dll
        • Size 21KB
        • SHA256 68bc19911007ab92d263cb40277a6afc084ca413178ad40b919302b7bbb14b38
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 21KB
        • SHA256 045bd4b41c0568fc916a21cc366da93597768d8ead45411c244cf98d605dbaaf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 21KB
        • SHA256 86c8c545c8f358cbe9b822c58c6af3fe00078af0422af0e391d32270cc6d8921
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 21KB
        • SHA256 ae2b8199066cb22395180d86bdc955dc2d33a6bd8d64b61ba77573d1e78b8d70
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 21KB
        • SHA256 c27e4c79489c6be0eaaf7b082792c95ff7bf8adc4f67cf65f7a1a66d03c9bb87
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-core-profile-l1-1-0.dll
        • Size 21KB
        • SHA256 0a422b5f26d89e799f0e80065c5738829ac476765613198f8b142b62753b3be7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 21KB
        • SHA256 e7e3f289510fcb895b22b756f64e596a4a736bf3e7cae8e71e393680dbb80f02
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-core-string-l1-1-0.dll
        • Size 21KB
        • SHA256 96d361bad0f010b1c815cb536cebdbc9cfd1034fbabbd43b612827b2d464de60
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-core-synch-l1-1-0.dll
        • Size 21KB
        • SHA256 e03d483fba05a5a50ef3ac414b904b2ff24ffbed08908b1e7f6a9416f9711856
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-core-synch-l1-2-0.dll
        • Size 21KB
        • SHA256 e67f6f15acae34dc5ef98de01d89466136232ded7305da22d2f0a454327ad079
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 21KB
        • SHA256 af3f19f3ae063e4fb687242391df2eda6535c7c490b38b0a6870e07c6ddace99
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-core-timezone-l1-1-0.dll
        • Size 21KB
        • SHA256 10b56211a2de348342c0cf4bcd2c91c53a0656f9476b6c0f02af88c29f392841
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-core-util-l1-1-0.dll
        • Size 21KB
        • SHA256 a46b6708fb8e5ee9183037a479b0896552785c598d99a8339e2a05e32ea23d0f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-crt-conio-l1-1-0.dll
        • Size 21KB
        • SHA256 ee81ab5e33d73561172c2effc57272daa2b8e9297d30e20884177dd964fd3137
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-crt-convert-l1-1-0.dll
        • Size 25KB
        • SHA256 69e6ae713da2e6dd587aee3f5192d72ea2a37b352b123f8462c6d60f7a1e0fac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-crt-environment-l1-1-0.dll
        • Size 21KB
        • SHA256 6a951c49959f820c55b0884fe74723aaaa302a13d93ec9c6c5db21a703af34de
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 21KB
        • SHA256 90d420f9193daddc9a577ce5f37d043de87ccd25967e2a9a57492394e62bb5ae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-crt-heap-l1-1-0.dll
        • Size 21KB
        • SHA256 3bd8121250a67f5422b2ac2a3af070016ea0bd26e56ba36a81ff6665b936fdd2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-crt-locale-l1-1-0.dll
        • Size 21KB
        • SHA256 cd557478f332ab196f81d274ae433c83ddf95cc9ef7579077fc31af4dc761f58
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-crt-math-l1-1-0.dll
        • Size 29KB
        • SHA256 1a5092b4e489c89b5455258169ff25f31d5ccde589989fce64092b8d7cd9d45b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-multibyte-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-crt-multibyte-l1-1-0.dll
        • Size 29KB
        • SHA256 f281f86516e723b2abfdb46445db4681f57fa756aa3c93e6abd911b68ffd6bca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-private-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-crt-private-l1-1-0.dll
        • Size 73KB
        • SHA256 42e7bb14603eecae1b891bda68c899404d4b06a937b5828677fd6ef2320c2d08
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-crt-process-l1-1-0.dll
        • Size 21KB
        • SHA256 21a538ef083b282739fe98f078ca1ce141b0f81554fe624d363c8b4a297d158b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 25KB
        • SHA256 7300fbff1c371d248ab748a9b20484ee8204c82041e80b691abe9734353dd47d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 25KB
        • SHA256 01a2fa8bfd1bad090c0ecc227663c21b343ee843f617cd0c039da930493be901
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-crt-string-l1-1-0.dll
        • Size 25KB
        • SHA256 34837d23079efd40377722266c69c9159710b4f2805ee57968c75025e9f9b1c8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-crt-time-l1-1-0.dll
        • Size 21KB
        • SHA256 b4df98e42f93fbf94a58d1924850d58f4dc6f280207c1e2b7911cf11692f65c8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\api-ms-win-crt-utility-l1-1-0.dll
        • Size 21KB
        • SHA256 30eab6b13258b545642972d2a1bd1916cd3d1ee109f6c0706bfa0d1752e2e6af
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\base_library.zip
        • Size 1.4MB
        • SHA256 e39eb59d58583e30511eda031b325b0f52eb114643fe9a944f3734ff7bfa0292
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libcrypto-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 05fe080eab7fc535c51e10c1bd76a2f3e6217f9c91a25034774588881c3f99de
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libffi-8.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libssl-3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\libssl-3.dll
        • Size 768KB
        • SHA256 2e9fbcd8f7fdc13a5179533239811456554f2b3aa2fb10e1b17be0df81c79006
        • MD5 SHA1 SHA512 SSDEEP TLSH

        INSTALLER

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\numpy-2.2.6.dist-info\INSTALLER
        • Size 4B
        • SHA256 ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508
        • MD5 SHA1 SHA512

        pyexpat.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\pyexpat.pyd
        • Size 193KB
        • SHA256 58b95f03a2d7ec49f5260e3e874d2b9fb76e95ecc80537e27abef0c74d03cb00
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python3.DLL

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\python3.DLL
        • Size 65KB
        • SHA256 920350a7c24c46339754e38d0db34ab558e891da0b3a389d5230a0d379bee802
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python311.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\python311.dll
        • Size 5.5MB
        • SHA256 2835e0f24fb13ef019608b13817f3acf8735fbc5f786d00501c4a151226bdff1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        select.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\select.pyd
        • Size 29KB
        • SHA256 fb06ac13f8b444c3f7ae5d2af15710a4e60a126c3c61a1f1e1683f05f685626c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sqlite3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\sqlite3.dll
        • Size 1.4MB
        • SHA256 ff950af2dad140377a55da6f3c242327ced0cf498db50e028abe1ed023f19b90
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ucrtbase.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI49002\ucrtbase.dll
        • Size 1.1MB
        • SHA256 c04daeba7e7c4b711d33993ab4c51a2e087f98f4211aea0dcb3a216656ba0ab7
        • MD5 SHA1 SHA512 SSDEEP TLSH