Overview

overview

7

Static

static

3

2026-09-06...at.exe

windows10-2004-x64

7

2026-09-06...at.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    07/09/2026, 06:17

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-09-06_288efb4c5c672873d089839be22eb758_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
  • Size 8.7MB
  • Sample260907-g2bqraysgt
  • SHA256 cee2fd33034efef6172849d0066b454f0d32b403da59de8b4115aae69de9d567
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
upx

Malware Config

Signatures

  • Loads dropped DLL 11 IoCs
  • UPX packed file 20 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-09-06_288efb4c5c672873d089839be22eb758_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-09-06_288efb4c5c672873d089839be22eb758_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3644
    • C:\Users\Admin\AppData\Local\Temp\2026-09-06_288efb4c5c672873d089839be22eb758_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-09-06_288efb4c5c672873d089839be22eb758_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
      2⤵
      • Loads dropped DLL
      PID:5756

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36442\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 36585912e5eaf83ba9fea0631534f690ccdc2d7ba91537166fe53e56c221e153
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36442\_bz2.pyd
        • Size 50KB
        • SHA256 714b49f7fa9f50565e1f9f1da0cf92285663c0ba0443a8cee434cc3bee57ed11
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _cffi_backend.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36442\_cffi_backend.cp312-win_amd64.pyd
        • Size 71KB
        • SHA256 aaa6227ffed76f9a8ff73df7d69d98ca8e350c8371a6d65a30a32e3afe34f524
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36442\_ctypes.pyd
        • Size 61KB
        • SHA256 872f21bc432d93dbdbe68100abf2c225109659ee0e132a48c6cec06adbc61f04
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36442\_lzma.pyd
        • Size 88KB
        • SHA256 f060e0a826f476a061fd899c38736c683cb4489dfebe2e791ad3b08954c137b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36442\base_library.zip
        • Size 1.2MB
        • SHA256 738981fe777595a72169cb668ad9cec8739daafb903a21534586e040897e75c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _rust.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36442\cryptography\hazmat\bindings\_rust.pyd
        • Size 2.4MB
        • SHA256 ed387a6e42fbc0000d1d3243238661604507312739f967668711bb91909aabff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36442\libffi-8.dll
        • Size 29KB
        • SHA256 63052860273315641783de5e6b406914f67c050ee793bbacfdcd23c2864b0825
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.DLL
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36442\python3.DLL
        • Size 68KB
        • SHA256 e6811bc64d0cc2a8525098b691db364679602c7456894c2f69e1837214a8a705
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python312.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36442\python312.dll
        • Size 1.7MB
        • SHA256 34aef6050fbd074a5a0962323add4c41fd21c8faae56cd87c18885f186b62d38
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI36442\ucrtbase.dll
        • Size 977KB
        • SHA256 d804ea40eacfc22a5e029b66d6d4f83d81f76a7ead80313b33839253f90af6b7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/5756-84-0x00007FFCCC550000-0x00007FFCCCC12000-memory.dmp
        Download

        memory/5756-75-0x00007FFCE3470000-0x00007FFCE3495000-memory.dmp
        Download

        memory/5756-83-0x00007FFCDF5C0000-0x00007FFCDF5EC000-memory.dmp
        Download

        memory/5756-66-0x00007FFCCC550000-0x00007FFCCCC12000-memory.dmp
        Download

        memory/5756-85-0x00007FFCE3470000-0x00007FFCE3495000-memory.dmp
        Download

        memory/5756-77-0x00007FFCE3460000-0x00007FFCE346F000-memory.dmp
        Download

        memory/5756-98-0x00007FFCCAFB0000-0x00007FFCCB873000-memory.dmp
        Download

        memory/5756-81-0x00007FFCE0740000-0x00007FFCE0759000-memory.dmp
        Download

        memory/5756-101-0x00007FFCD3F60000-0x00007FFCD3F96000-memory.dmp
        Download

        memory/5756-102-0x000001D70D590000-0x000001D70D591000-memory.dmp
        Download

        memory/5756-105-0x00007FFCE3470000-0x00007FFCE3495000-memory.dmp
        Download

        memory/5756-110-0x00007FFCD3F60000-0x00007FFCD3F96000-memory.dmp
        Download

        memory/5756-104-0x00007FFCCC550000-0x00007FFCCCC12000-memory.dmp
        Download

        memory/5756-109-0x00007FFCCAFB0000-0x00007FFCCB873000-memory.dmp
        Download