Overview

overview

7

Static

static

3

2026-08-25...at.exe

windows10-2004-x64

7

2026-08-25...at.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    150s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    26/08/2026, 05:53

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-25_de508ab58b750eb82bb663f4e80a5826_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
  • Size 35.1MB
  • Sample260826-glc9msgp5z
  • SHA256 ca3b444d48d0de94a4e03c097ca8263622e87e747123d7bdd17a9b8ce94b5329
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 21 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-25_de508ab58b750eb82bb663f4e80a5826_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-25_de508ab58b750eb82bb663f4e80a5826_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3416
    • C:\Users\Admin\AppData\Local\Temp\2026-08-25_de508ab58b750eb82bb663f4e80a5826_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-08-25_de508ab58b750eb82bb663f4e80a5826_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: GetForegroundWindowSpam
      PID:5676

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        MSVCP140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34162\PyQt6\Qt6\bin\MSVCP140.dll
        • Size 544KB
        • SHA256 0f885b509a685d2bbfa652fed26b5fb31d88fbdab0a978c641d1c7b8aa460aa9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MSVCP140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34162\PyQt6\Qt6\bin\MSVCP140_1.dll
        • Size 35KB
        • SHA256 bfad5aef4c63a669e3c140655cdfdf395b6c979b400a447bd5dcb65ed8826c3d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MSVCP140_2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34162\PyQt6\Qt6\bin\MSVCP140_2.dll
        • Size 273KB
        • SHA256 3ea06f0ee098b4823cb79599df3780e7f23cce52c19aac31d2a0d47efe33a5e9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Core.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34162\PyQt6\Qt6\bin\Qt6Core.dll
        • Size 10.0MB
        • SHA256 37fde8ebd11b474b806a1cf8d4564780dc51afdad3ac3611cd0aa92982f73687
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Gui.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34162\PyQt6\Qt6\bin\Qt6Gui.dll
        • Size 9.1MB
        • SHA256 96b445dd611f30a3e3b938d981c2b13009d65294f48a8ac5f53dde8037132b53
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Widgets.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34162\PyQt6\Qt6\bin\Qt6Widgets.dll
        • Size 6.3MB
        • SHA256 48deb69896f3185c8fe21221262670591ddc0ce9e7f2182be682e9f28208f7a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34162\PyQt6\Qt6\bin\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 1f2d41c4aa5db0bc33ebf7b66d72943a817d7ce6cbe880502a9403823633093f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qminimal.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34162\PyQt6\Qt6\plugins\platforms\qminimal.dll
        • Size 60KB
        • SHA256 b4220c0f5bdc7fadd1db68cf4cf270ed0f28206aa6006e2f38aeeacf2d56f7d3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qoffscreen.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34162\PyQt6\Qt6\plugins\platforms\qoffscreen.dll
        • Size 111KB
        • SHA256 6cef891caf15f82be0e564e5167ea1aafb039f9f9becca6fc18d9967c0475784
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qwindows.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34162\PyQt6\Qt6\plugins\platforms\qwindows.dll
        • Size 976KB
        • SHA256 a6076030a5f0bf1b9254b0999e5260f66b1abd3b51214777e47a7c2e1d7cad81
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qmodernwindowsstyle.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34162\PyQt6\Qt6\plugins\styles\qmodernwindowsstyle.dll
        • Size 223KB
        • SHA256 e6902591acf14d9a9abb96130eea6a1b5b6ee4dfb3d3908d40135f3dcf085e51
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtCore.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34162\PyQt6\QtCore.pyd
        • Size 2.5MB
        • SHA256 91dd5166110b88a4f4d3acda6fe6c10ed699882dd3602328a59e9f656cc766b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtGui.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34162\PyQt6\QtGui.pyd
        • Size 2.2MB
        • SHA256 cf5ae37fd119fb29a53f1f2cea1362fdf036d940191be45d83da0f98ce8752b8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtWidgets.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34162\PyQt6\QtWidgets.pyd
        • Size 4.8MB
        • SHA256 4f81361816e94e1ae05f178085b22d5b9b19e417713b1966dd481a4017aa3b21
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sip.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34162\PyQt6\sip.cp312-win_amd64.pyd
        • Size 108KB
        • SHA256 4f9b530b045d07007b2bda07580c0ef031a973b8ebd577ae9f533fe52e2bb894
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34162\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34162\_bz2.pyd
        • Size 84KB
        • SHA256 65f610646d10d5babea080e060d244b546ec52c54012e5e937dc72dcc2e2e7bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34162\_lzma.pyd
        • Size 157KB
        • SHA256 e3deecc1f59a3b811c608861decd84de1e8df8bafd5e2b39188861318c5a38cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34162\base_library.zip
        • Size 1.3MB
        • SHA256 c0069fcbd3d57302585dc56e034a2bc243ddbf06133c8a61ebd60485a1956f3b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34162\python3.dll
        • Size 68KB
        • SHA256 fb975a606e7fbf74f64260e3f60c3490b4f74a183c0926fd6ed1ac4c52ac7b1c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python312.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34162\python312.dll
        • Size 6.6MB
        • SHA256 9a0e3435aaa680d868150f87ab3e388ad2eebc22f87e036155c7b4eda8cd2120
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI34162\ucrtbase.dll
        • Size 1011KB
        • SHA256 d67926328a72816d2944d7c88df6ff4bfccd41a9ce39af0309a0639829d0e7fb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/5676-202-0x00007FFB36EF0000-0x00007FFB3717F000-memory.dmp
        Download

        memory/5676-217-0x00007FFB2EBC0000-0x00007FFB2F09B000-memory.dmp
        Download

        memory/5676-224-0x000002132BEF0000-0x000002132BF00000-memory.dmp
        Download

        memory/5676-220-0x00007FFB2DA00000-0x00007FFB2DC39000-memory.dmp
        Download

        memory/5676-213-0x00007FFB2E570000-0x00007FFB2EBBA000-memory.dmp
        Download