Overview

overview

7

Static

static

3

2026-09-23...at.exe

windows10-2004-x64

7

2026-09-23...at.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    126s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    24/09/2026, 01:49

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-09-23_c08bebdcd171a27eaebbefd1d33ca61d_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
  • Size 15.1MB
  • Sample260924-b8wrlsbe74
  • SHA256 d0de8b1e7c502d241288f4f2c751958788aba95ea9ba3b77466e9c0620a66ebd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 18 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-09-23_c08bebdcd171a27eaebbefd1d33ca61d_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-09-23_c08bebdcd171a27eaebbefd1d33ca61d_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5032
    • C:\Users\Admin\AppData\Local\Temp\2026-09-23_c08bebdcd171a27eaebbefd1d33ca61d_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-09-23_c08bebdcd171a27eaebbefd1d33ca61d_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
      2⤵
      • Loads dropped DLL
      PID:2632

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        _imaging.cp313-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50322\PIL\_imaging.cp313-win_amd64.pyd
        • Size 2.5MB
        • SHA256 88756e8e0e3f6180e518da25d379597c861e2d20d716ef001894789b515c1777
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50322\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50322\_bz2.pyd
        • Size 84KB
        • SHA256 a19f9a70f8ce7e6f3beae4b798ca25cb7c7dc0a198c29d510a384f2b1b40c842
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50322\_ctypes.pyd
        • Size 130KB
        • SHA256 6659251ad06965e0cfd8cd90c654fbff4081e93fceeca84e5d544f436217550c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50322\_hashlib.pyd
        • Size 67KB
        • SHA256 a78d0d7dea3a455af1df7a4890dbbf3dde6739cf4efc0386078539e7295d41dd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50322\_lzma.pyd
        • Size 155KB
        • SHA256 54f528329302bc3030695d90f22d887a5e275f3a4a7ae6180d05af3a7fefcdbc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50322\_queue.pyd
        • Size 34KB
        • SHA256 3d601a2313c13b1489cfa7838eae8c0ab31ca99f07c62d21a6152203d3e33864
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50322\_socket.pyd
        • Size 84KB
        • SHA256 682dfbb04d0183c34a1cf2f174125f8372b9aaed8110e21be1060e3297b43838
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50322\_ssl.pyd
        • Size 177KB
        • SHA256 9d963eece703d3c5e6df0725bc7c9049b4b05485b330f9f6cbe6b7fd7ab9b202
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50322\base_library.zip
        • Size 1.3MB
        • SHA256 2dfeeae2b825f0a9587001c45fbe79fa2e8decebc4e3aa42e6d188b2975e2215
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        md.cp313-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50322\charset_normalizer\md.cp313-win_amd64.pyd
        • Size 10KB
        • SHA256 4e66da1baef3b663ab8f48feed4ed1d72e977b4209240595d2c440071bc632c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        md__mypyc.cp313-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50322\charset_normalizer\md__mypyc.cp313-win_amd64.pyd
        • Size 125KB
        • SHA256 a26b6459a25f1e9b600ac3df6b2c4f30d7f9d643292546b85ccb763d49fdea90
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50322\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 ccfffddcd3defb8d899026298af9af43bc186130f8483d77e97c93233d5f27d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50322\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50322\libssl-3.dll
        • Size 776KB
        • SHA256 007142039f04d04e0ed607bda53de095e5bc6a8a10d26ecedde94ea7d2d7eefe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python313.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50322\python313.dll
        • Size 5.8MB
        • SHA256 dd05f134a2f8126a8cfe8d797b87fa966537b894dd49f93336566f9e8d21d4bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50322\select.pyd
        • Size 32KB
        • SHA256 9d3a0041948ad362a3db15a83fa163ad71bfd6283b7461b7fd9fafa27dc7106f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI50322\unicodedata.pyd
        • Size 695KB
        • SHA256 9ce0fc32072769ccb8efcb7c0da10619e4fae5c5eee87b95c79b42024f9aa899
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download