Analysis
- max time kernel
118s - max time network
147s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
05/09/2026, 11:50
Behavioral task
behavioral1
Sample
2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
General
- Target 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
- Size 7.4MB
- Sample260905-nz2bysbn91
- SHA256 3d350f0580a9421acb96fafb79223b41a931e663e461eba999fded99ce2f191f
- MD5 4a45abd839ddcdeab22daaba26647dcb
- SHA1 093c73fc78ce34d55a883f06d36410a7dd4e76de
- SHA512 98d757464720fab92b7515b04c1a5777ea317bd6164283fe742333d1b9988d81776d82c1a575c08b8e39e579f758f029cad5aec79e379226a263df85bcd93f4a
- SSDEEP 98304:YYg8+UhnuaZsKluZhCMYkc/Gbt5FkOwSrIcUsLXRL2wbup8F8g6XwnTswmOnO:IR6uoVurHQ4P/XRLF82nTswmOnO
- TLSH T10B7633A897A405F7FDF6E33D9AA1C8B2C665BC121711C59383F098A22D637C0663B753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 64 IoCs
pid Process 2664 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2664 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2664 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2664 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2664 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2664 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2664 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2664 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2664 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2664 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 4904 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 4904 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 4904 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 4904 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 4904 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 4904 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 4904 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 4904 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 4904 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 4904 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2896 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2896 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2896 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2896 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2896 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2896 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2896 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2896 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2896 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2896 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2616 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2616 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2616 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2616 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2616 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2616 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2616 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2616 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2616 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2616 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 4272 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 4272 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 4272 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 4272 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 4272 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 4272 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 4272 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 4272 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 4272 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 4272 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2776 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2776 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2776 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2776 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2776 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2776 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2776 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2776 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2776 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2776 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2648 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2648 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2648 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 2648 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2632 wrote to memory of 2664 2632 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 90 PID 2664 wrote to memory of 4904 2664 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 91 PID 4904 wrote to memory of 2896 4904 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 92 PID 2896 wrote to memory of 2616 2896 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 93 PID 2616 wrote to memory of 4272 2616 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 94 PID 4272 wrote to memory of 2776 4272 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 95 PID 2776 wrote to memory of 2648 2776 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 96 PID 2648 wrote to memory of 1272 2648 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 97 PID 1272 wrote to memory of 5984 1272 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 98 PID 5984 wrote to memory of 2200 5984 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 99 PID 2200 wrote to memory of 3900 2200 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 100 PID 3900 wrote to memory of 4796 3900 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 101 PID 4796 wrote to memory of 3640 4796 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 102 PID 3640 wrote to memory of 5896 3640 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 103 PID 5896 wrote to memory of 3208 5896 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 104 PID 3208 wrote to memory of 948 3208 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 105 PID 948 wrote to memory of 5564 948 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 106 PID 5564 wrote to memory of 3960 5564 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 107 PID 3960 wrote to memory of 4388 3960 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 108 PID 4388 wrote to memory of 1352 4388 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 109 PID 1352 wrote to memory of 1132 1352 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 110 PID 1132 wrote to memory of 4664 1132 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 111 PID 4664 wrote to memory of 5436 4664 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 112 PID 5436 wrote to memory of 5280 5436 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 113 PID 5280 wrote to memory of 4944 5280 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 114 PID 4944 wrote to memory of 1900 4944 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 115 PID 1900 wrote to memory of 4880 1900 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 116 PID 4880 wrote to memory of 1676 4880 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 117 PID 1676 wrote to memory of 1908 1676 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 118 PID 1908 wrote to memory of 4416 1908 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 119 PID 4416 wrote to memory of 3968 4416 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 120 PID 3968 wrote to memory of 2680 3968 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 121 PID 2680 wrote to memory of 1388 2680 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 122 PID 1388 wrote to memory of 1252 1388 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 123 PID 1252 wrote to memory of 3212 1252 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 124 PID 3212 wrote to memory of 3964 3212 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 125 PID 3964 wrote to memory of 5504 3964 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 126 PID 5504 wrote to memory of 5264 5504 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 127 PID 5264 wrote to memory of 5472 5264 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 128 PID 5472 wrote to memory of 5600 5472 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 129 PID 5600 wrote to memory of 3312 5600 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 130 PID 3312 wrote to memory of 1780 3312 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 131 PID 1780 wrote to memory of 4072 1780 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 132 PID 4072 wrote to memory of 552 4072 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 133 PID 552 wrote to memory of 1732 552 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 134 PID 1732 wrote to memory of 5380 1732 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 135 PID 5380 wrote to memory of 1836 5380 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 136 PID 1836 wrote to memory of 2472 1836 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 137 PID 2472 wrote to memory of 3188 2472 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 138 PID 3188 wrote to memory of 5216 3188 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 139 PID 5216 wrote to memory of 596 5216 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 140 PID 596 wrote to memory of 2552 596 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 141 PID 2552 wrote to memory of 564 2552 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 142 PID 564 wrote to memory of 4956 564 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 143 PID 4956 wrote to memory of 2852 4956 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 144 PID 2852 wrote to memory of 4220 2852 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 145 PID 4220 wrote to memory of 3868 4220 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 146 PID 3868 wrote to memory of 1524 3868 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 147 PID 1524 wrote to memory of 4224 1524 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 148 PID 4224 wrote to memory of 5740 4224 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 149 PID 5740 wrote to memory of 2296 5740 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 150 PID 2296 wrote to memory of 3664 2296 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 151 PID 3664 wrote to memory of 4092 3664 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 152 PID 4092 wrote to memory of 5628 4092 2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe 153
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2632 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"2⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:2664 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin323⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:4904 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin324⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:2896 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin325⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:2616 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin326⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:4272 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin327⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:2776 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin328⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:2648 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin329⤵
- Suspicious use of WriteProcessMemory
PID:1272 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3210⤵
- Suspicious use of WriteProcessMemory
PID:5984 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3211⤵
- Suspicious use of WriteProcessMemory
PID:2200 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3212⤵
- Suspicious use of WriteProcessMemory
PID:3900 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3213⤵
- Suspicious use of WriteProcessMemory
PID:4796 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3214⤵
- Suspicious use of WriteProcessMemory
PID:3640 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3215⤵
- Suspicious use of WriteProcessMemory
PID:5896 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3216⤵
- Suspicious use of WriteProcessMemory
PID:3208 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3217⤵
- Suspicious use of WriteProcessMemory
PID:948 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3218⤵
- Suspicious use of WriteProcessMemory
PID:5564 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3219⤵
- Suspicious use of WriteProcessMemory
PID:3960 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3220⤵
- Suspicious use of WriteProcessMemory
PID:4388 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3221⤵
- Suspicious use of WriteProcessMemory
PID:1352 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3222⤵
- Suspicious use of WriteProcessMemory
PID:1132 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3223⤵
- Suspicious use of WriteProcessMemory
PID:4664 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3224⤵
- Suspicious use of WriteProcessMemory
PID:5436 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3225⤵
- Suspicious use of WriteProcessMemory
PID:5280 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3226⤵
- Suspicious use of WriteProcessMemory
PID:4944 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3227⤵
- Suspicious use of WriteProcessMemory
PID:1900 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3228⤵
- Suspicious use of WriteProcessMemory
PID:4880 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3229⤵
- Suspicious use of WriteProcessMemory
PID:1676 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3230⤵
- Suspicious use of WriteProcessMemory
PID:1908 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3231⤵
- Suspicious use of WriteProcessMemory
PID:4416 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3232⤵
- Suspicious use of WriteProcessMemory
PID:3968 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3233⤵
- Suspicious use of WriteProcessMemory
PID:2680 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3234⤵
- Suspicious use of WriteProcessMemory
PID:1388 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3235⤵
- Suspicious use of WriteProcessMemory
PID:1252 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3236⤵
- Suspicious use of WriteProcessMemory
PID:3212 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3237⤵
- Suspicious use of WriteProcessMemory
PID:3964 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3238⤵
- Suspicious use of WriteProcessMemory
PID:5504 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3239⤵
- Suspicious use of WriteProcessMemory
PID:5264 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3240⤵
- Suspicious use of WriteProcessMemory
PID:5472 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3241⤵
- Suspicious use of WriteProcessMemory
PID:5600 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3242⤵
- Suspicious use of WriteProcessMemory
PID:3312 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3243⤵
- Suspicious use of WriteProcessMemory
PID:1780 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3244⤵
- Suspicious use of WriteProcessMemory
PID:4072 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3245⤵
- Suspicious use of WriteProcessMemory
PID:552 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3246⤵
- Suspicious use of WriteProcessMemory
PID:1732 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3247⤵
- Suspicious use of WriteProcessMemory
PID:5380 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3248⤵
- Suspicious use of WriteProcessMemory
PID:1836 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3249⤵
- Suspicious use of WriteProcessMemory
PID:2472 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3250⤵
- Suspicious use of WriteProcessMemory
PID:3188 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3251⤵
- Suspicious use of WriteProcessMemory
PID:5216 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3252⤵
- Suspicious use of WriteProcessMemory
PID:596 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3253⤵
- Suspicious use of WriteProcessMemory
PID:2552 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3254⤵
- Suspicious use of WriteProcessMemory
PID:564 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3255⤵
- Suspicious use of WriteProcessMemory
PID:4956 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3256⤵
- Suspicious use of WriteProcessMemory
PID:2852 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3257⤵
- Suspicious use of WriteProcessMemory
PID:4220 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3258⤵
- Suspicious use of WriteProcessMemory
PID:3868 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3259⤵
- Suspicious use of WriteProcessMemory
PID:1524 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3260⤵
- Suspicious use of WriteProcessMemory
PID:4224 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3261⤵
- Suspicious use of WriteProcessMemory
PID:5740 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3262⤵
- Suspicious use of WriteProcessMemory
PID:2296 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3263⤵
- Suspicious use of WriteProcessMemory
PID:3664 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3264⤵
- Suspicious use of WriteProcessMemory
PID:4092 -
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3265⤵PID:5628
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3266⤵PID:3340
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3267⤵PID:1280
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3268⤵PID:5884
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3269⤵PID:3344
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3270⤵PID:5012
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3271⤵PID:4580
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3272⤵PID:5256
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3273⤵PID:4204
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3274⤵PID:2952
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3275⤵PID:1344
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3276⤵PID:5688
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3277⤵PID:3944
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3278⤵PID:3244
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3279⤵PID:5760
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3280⤵PID:2512
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3281⤵PID:4684
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3282⤵PID:2312
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3283⤵PID:5672
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3284⤵PID:6016
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3285⤵PID:2768
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3286⤵PID:4180
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3287⤵PID:5848
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3288⤵PID:3484
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3289⤵PID:1756
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3290⤵PID:1548
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3291⤵PID:5332
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3292⤵PID:2620
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3293⤵PID:2176
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3294⤵PID:2336
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3295⤵PID:4468
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3296⤵PID:5888
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3297⤵PID:5732
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3298⤵PID:244
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin3299⤵PID:256
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin32100⤵PID:4320
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin32101⤵PID:4608
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin32102⤵PID:5376
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin32103⤵PID:4232
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin32104⤵PID:4888
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin32105⤵PID:3220
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin32106⤵PID:4156
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin32107⤵PID:4604
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin32108⤵PID:3120
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin32109⤵PID:4936
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin32110⤵PID:1588
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin32111⤵PID:5664
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin32112⤵PID:1768
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin32113⤵PID:2920
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin32114⤵PID:5168
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin32115⤵PID:2856
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin32116⤵PID:1560
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin32117⤵PID:4612
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin32118⤵PID:4644
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin32119⤵PID:3300
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin32120⤵PID:1704
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin32121⤵PID:5900
-
C:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exeC:\Users\Admin\AppData\Local\Temp\2026-09-04_4a45abd839ddcdeab22daaba26647dcb_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe -m pip install pypiwin32122⤵PID:3020
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-