Overview

overview

7

Static

static

3

2026-09-29...at.exe

windows10-2004-x64

7

2026-09-29...at.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    137s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    30/09/2026, 04:28

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-09-29_212af6388ac501d2ef05e410d9ef483c_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
  • Size 12.5MB
  • Sample260930-e34f2sxcra
  • SHA256 114f28caaf8233dddc43df50030a64dd107c2ba865e3dbd1b0d9f3f8e25395b2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 19 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-09-29_212af6388ac501d2ef05e410d9ef483c_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-09-29_212af6388ac501d2ef05e410d9ef483c_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4596
    • C:\Users\Admin\AppData\Local\Temp\2026-09-29_212af6388ac501d2ef05e410d9ef483c_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-09-29_212af6388ac501d2ef05e410d9ef483c_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
      2⤵
      • Loads dropped DLL
      PID:1264

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\_bz2.pyd
        • Size 85KB
        • SHA256 a4be36fffeefa8b24c1234d548da8f05558aba53c2ea7d1d2614776eaad8fbf4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\_ctypes.pyd
        • Size 139KB
        • SHA256 f8a9f7831e81b2bfba12456e589f8198114f24986bd527ac231a844565afcddb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\_lzma.pyd
        • Size 157KB
        • SHA256 f7ad11fbbb7aeaf7b6566a532a3243e3ae5f92bac480dbe5c2ef300fe2c1dabe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _zstd.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\_zstd.pyd
        • Size 491KB
        • SHA256 536a3b521a3c42d2827ece0ccfbe40b83a2fd96a0f5496cd60b943b10e1266d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-console-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-core-console-l1-1-0.dll
        • Size 22KB
        • SHA256 015bd08815c7b934a8952c3a7578e9ce59f21136e8a880d42bbd414bec2c6058
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-datetime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-core-datetime-l1-1-0.dll
        • Size 22KB
        • SHA256 5534812cdbdae94ba45cb216e5eb9af686b853948df54365103555abbbaf9d9a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-debug-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-core-debug-l1-1-0.dll
        • Size 22KB
        • SHA256 837d2b1b2cd03e03fc6ccb050698b6b5763af17c201304872342a5eae9e0a2d2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-errorhandling-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 22KB
        • SHA256 de43b165f568c276c00e95acd454e3092f352a18e95874595f4f4658c06d2ec7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-fibers-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-core-fibers-l1-1-0.dll
        • Size 22KB
        • SHA256 3cebc45bf479ad74cfabf2c6bfd4994d7ad639ed1221025981d19cedf9ce0416
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-fibers-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-core-fibers-l1-1-1.dll
        • Size 22KB
        • SHA256 5ef70308bcca628ce6b0e2856b15b1c7ae340c3f9bbbc4c1071d8c191a34a5c3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-core-file-l1-1-0.dll
        • Size 26KB
        • SHA256 250ac829f2617bcac1c6e5b8c4f630462e20765863ba573526a3e11bbfb94a9a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-core-file-l1-2-0.dll
        • Size 22KB
        • SHA256 ae14079a114733f60ce87b92cba42acd8083c2cd67594e53bc37dc0b97a4b465
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l2-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-core-file-l2-1-0.dll
        • Size 22KB
        • SHA256 914bf26a298713119477ea0a8e7bd43171b91344ebe24fb47ad77c49686e3d87
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-handle-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-core-handle-l1-1-0.dll
        • Size 22KB
        • SHA256 ab5489955e371b15f77906c08ec3c7affe2c7a46a08c514ca628768b4478974b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-core-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 c70f9644d8377fa39c5b71f2e9734c1400d7598904fdeb772e8502099982dcb7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-interlocked-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 22KB
        • SHA256 f8129710188e407bb0e6f46d30aeba277d67b947ece5fe09e883fde2323f3ae6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-kernel32-legacy-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-core-kernel32-legacy-l1-1-1.dll
        • Size 22KB
        • SHA256 5200b16cb2ddc61cfc07373a9a84aa85a3ab50806ca96c879c883275832944c1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-libraryloader-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 22KB
        • SHA256 48786fb88b001dcd1f63acea903d3ca9cc0b3060d5a325e3f2f3cbc3bfd53166
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-localization-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-core-localization-l1-2-0.dll
        • Size 22KB
        • SHA256 9ec3898f7eba91faa28b51616c211a2689e3a13aeef8de6e13cb674e49d689eb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-memory-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-core-memory-l1-1-0.dll
        • Size 22KB
        • SHA256 3a6cbc524c99e1cd80d5368f5601402a37ad602528b1ab628093573ef638eb3b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-namedpipe-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 22KB
        • SHA256 97145ef89c44949fcf0f04ac834a8bc7d687ef49ee73ae9fc32f3c11136b7201
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processenvironment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 22KB
        • SHA256 8bc7c10b1851aea644e9c9f381cdb935e091fee6b0be3d3aedc6fffaac96adb7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 22KB
        • SHA256 d8030b777617c71f0f94564607699dbf7561487d779db9756aed378c5675213f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 22KB
        • SHA256 f5e676713340f73a03a3d41a6ec9883b431da7d16c7f07bd0a920fb80e6c0753
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-profile-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-core-profile-l1-1-0.dll
        • Size 22KB
        • SHA256 f023d47e44d3eea6b0743580f57e8c6ba81e79d5ebfa7da26250076c647b980e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-rtlsupport-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 22KB
        • SHA256 9746d8930704153578a628c010638a5f818ffe5a927e25591b108e256dc6afca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-core-string-l1-1-0.dll
        • Size 22KB
        • SHA256 7c53ae24c982d16ffd1bf7f918d115b11b7f30e57bc7feaa18cb9781e4abb926
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-core-synch-l1-1-0.dll
        • Size 22KB
        • SHA256 56d9d62ca5dba79a6581b8d574a7d8b2a64a5ecb71e47dcf06ed0285708b1859
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-core-synch-l1-2-0.dll
        • Size 22KB
        • SHA256 f6482bbec5612c39ecb4822787a333f2b7570f7a5f922a4059be41ba957bb372
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-sysinfo-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 22KB
        • SHA256 272d02765fdd3582618236c2d309abba069642f9bc1062ede069d0c144e17007
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-sysinfo-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-core-sysinfo-l1-2-0.dll
        • Size 22KB
        • SHA256 8a0900788859d0eb51c2f48f50cc6ed376a120b518100fa20e11d7702ccde260
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-timezone-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-core-timezone-l1-1-0.dll
        • Size 22KB
        • SHA256 ff35de6c03812b332e140f17dade25c5dd4775156da9eeb1eaae3fddd27236ec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-util-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-core-util-l1-1-0.dll
        • Size 22KB
        • SHA256 191ef3e98641a57296f19d572d8eb62489470ff1ef6030d136af170c2f835173
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-conio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-crt-conio-l1-1-0.dll
        • Size 22KB
        • SHA256 54ee5ec719a051496ff60aa00dbeaa94b9a7d2cdac27fe9b7317f1a666b6a2aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-convert-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-crt-convert-l1-1-0.dll
        • Size 26KB
        • SHA256 8b94662429171019fcd63c70bbf2095a075170599704a5e7dcdbe3da13f3a429
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-environment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-crt-environment-l1-1-0.dll
        • Size 22KB
        • SHA256 39e5929593709e8af3bc9e0a75ec1155778d6f4a247f4cdfc58928ad6db88434
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-filesystem-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 22KB
        • SHA256 5a8ecebac32edf4e1f3c5c6c1c8ea1a1add6cda4f9c9cb26f752fb295bea6865
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-crt-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 c71080cbcb43bf1f8f3e391deb12a582eb0abefc80946f340675a2c616e4feb4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-locale-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-crt-locale-l1-1-0.dll
        • Size 22KB
        • SHA256 6c68648e524187e03c4ad9aaa4a99113c6ee9f29fb39cc0ed93f951975138e63
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-math-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-crt-math-l1-1-0.dll
        • Size 30KB
        • SHA256 d4fbcccbe29371cbce431e43b2eb4f7ba9a6f04a3d740a071f02457a505e9dc8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-process-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-crt-process-l1-1-0.dll
        • Size 22KB
        • SHA256 47c1935942e3ac0812e4dcf18c0e265e565f0194a3349111c299712f5565f7ac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-runtime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 26KB
        • SHA256 72adc1b3677e0814d9c4ebf0964000e84bb2acf67336c8963061665e44f78029
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-stdio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 26KB
        • SHA256 900afc3989673c9bb1a687ed38c192f46db9e6ba6d11a668898a539e7fc23798
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-crt-string-l1-1-0.dll
        • Size 26KB
        • SHA256 fcf12466cc12fd3b73611fc0763a5a1f9d44e90349513c34a0c83b0f36421793
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-time-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-crt-time-l1-1-0.dll
        • Size 22KB
        • SHA256 886e57c4a6adb299b38f02945369f590a67da4e79a798359fc60aaa067212d7c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-utility-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\api-ms-win-crt-utility-l1-1-0.dll
        • Size 22KB
        • SHA256 5f8f26b216ade615b67a41f6fbbb910972fc6153315a65bb8f09912be50215b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\base_library.zip
        • Size 1.3MB
        • SHA256 675d0ca6fd2681c90c050d0df47018ebfcb47833a0cdc3ce5ad7f3463db2dedc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\libcrypto-3.dll
        • Size 5.0MB
        • SHA256 e03dd02fdcfb791981c9962827cfcf495f2a47a514c1526efb57f847a9df514a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\libssl-3.dll
        • Size 776KB
        • SHA256 1e4bc0638682bfcbb36f4465d6a2e9944d917a60f05ecc8ddf9e96847e05e13f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python314.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\python314.dll
        • Size 6.4MB
        • SHA256 1ac15e2224581fc678bbd17728b9aa538d47b891b72c76499ef07e54cd74f151
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\select.pyd
        • Size 32KB
        • SHA256 05734bd352ce60c944d474aa62468cc5eebf400097f1d9d0c453d37aed26fcca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tcl86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\tcl86t.dll
        • Size 1.8MB
        • SHA256 a308beae8555cff5ac2aff7eaf0aef40b5fe173f047e246dc49da9a4d3ef62f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tk86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\tk86t.dll
        • Size 1.5MB
        • SHA256 20f4876506bce7f89e53570e64fd1dce30a64548326b45f372871c7019560df4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI45962\ucrtbase.dll
        • Size 1.3MB
        • SHA256 3239227d27667ba20d10a880751924e5719de0078f9fce232d149d383f7681f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/1264-1056-0x00007FFF97210000-0x00007FFF97239000-memory.dmp
        Download