979c2bef0893087673d7ddbfc9f61c0b185664441a7b50de41fc4605b6552725

Analysis

max time kernel
150s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 10:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-09-30_7081b652931fdae301df33677202992e_akira_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe
Size 42.1MB
Sample260930-mlbzgacf29
SHA256 979c2bef0893087673d7ddbfc9f61c0b185664441a7b50de41fc4605b6552725
MD5 7081b652931fdae301df33677202992e
SHA1 eed15154f0859261b1f927f8b8b6ff0da5efd311
SHA512 ad483253dd6e97c23667419839a35fd3db7d3a773113afc4bf3e8ef558d869d226346c42a5f25cf21c675c04a4300e702fe4ae43c4829a6f170ce6cef59a64f1
SSDEEP 393216:bbWIYWYznLMUi/FerzSpiizZItNzOi9dFsErG4M2NRKPUyCN0HY1SM5AW2Yj7C58:bbdi1lR/1Sez7C
TLSH
T1B2A7AE07B2A611E9D5B7C078CA569A03F7B13869037067EB16D056B92F37BE02E7E311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1340	2026-09-30_7081b652931fdae301df33677202992e_akira_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe
1340	2026-09-30_7081b652931fdae301df33677202992e_akira_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe
1340	2026-09-30_7081b652931fdae301df33677202992e_akira_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-30_7081b652931fdae301df33677202992e_akira_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-30_7081b652931fdae301df33677202992e_akira_amadey_blankgrabber_glassworm_icedid_luca-stealer_njrat_poet-rat_qakbot.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1340

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

vba6866.tmp

Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vba6866.tmp
Size 3KB
SHA256 b75fe4f5d48201ade9940c61f9587f1dbc0651e2b0a896e69d081a840216fc50
MD5 4f14901365f3649360310cf87987d143
SHA1 c71f36f00118c5be753d1d7cf1208e4af985a563
SHA512 7e88f7229534206409e87e1ea073c26e9aeb940ec7e8951a518ed315f0343d5aa2546bf7743ed48a88a2916cbe00d87b4b9d9af77c79bc9d72d0f22acb011b61
TLSH
T1BE718AD4F725B899D476B906613F7284ACA62EE17CE1BC23C7163CD49EC98D0CA26097
MD5 SHA1 SHA512 TLSH

Submit Download

vba6876.tmp

Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vba6876.tmp
Size 3KB
SHA256 bd05bf0e3d2bd8b1c512e986aeec17ae02fba44b9e3c187fc4cb2ae24540f8fd
MD5 843832d62a75da0a38d471229b7b704a
SHA1 3eab8e493d8b226072ba82cc5d0e8e911c8d179e
SHA512 b010380d645c8f1ebeb795904676a16ad81eea78b245cb0f111a7e1774c99ec162454a6ffa6e12200d5c11f3bf233a40448e5e5daf6667b7688395f3dd317d46
TLSH
T17C718AD4F725B899D476B907613F7184ACA22EE17DE1BC23C7163CD49EC98D0CA26097
MD5 SHA1 SHA512 TLSH

Submit Download

vba68A6.tmp

Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vba68A6.tmp
Size 3KB
SHA256 1480415f944e48a94b6b92d796cfecc8aeb3374f99d20e79c1b5c1cef3972282
MD5 32a184fc53ab7b91634e98d040c20915
SHA1 c9136a2fb4cdfcf3789a2e13f7a206cfb03e98d8
SHA512 532c9332dcc6866ce442d44bfffbf0cf1279bac79dbf7aec9c96770553f38fdec706d9b5700b9449ed7473f5382754c6ded98723ce05e9f33eed2e45a95eed23
TLSH
T193718AD4F725B899D476B907613F7284ACA22EE17DE1BC23C7163CD49E898D0CA26097
MD5 SHA1 SHA512 TLSH

Submit Download

vba68A7.tmp

Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vba68A7.tmp
Size 3KB
SHA256 09d288cb8b99d24e5ef82d538909b231e4cb8af63bffdaf819c28ef0d55c5844
MD5 06c6fc77f58dfea638ea14deeebd1cb2
SHA1 72fd15cd2c4e1b9d64fa74b3a23dbfaba5db650e
SHA512 3189c2ac0340e8caeb1beb5cc1ac2911c618fbfedf5b0c3e94070086ad628fd13dcd9b1dd988f05ba241ce52d662918c210a77d3a1b0f9876b6e6253bf221aa6
TLSH
T1D7719AD4F725B899D476B907613F7284ACA22FE17CE1BC23C7163CD49E898D0CA26097
MD5 SHA1 SHA512 TLSH

Submit Download

vba68A8.tmp

Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vba68A8.tmp
Size 3KB
SHA256 f2ecd4bbb75b575bf121047d01e878f542b823aeab4ae20f0e9d8c9f1ffbe428
MD5 12d787bbfacb75427cb60335c4a2131d
SHA1 bf255d567e1a8efbaeb4644f50abd9004537918b
SHA512 dddb35e956d29c237ea755b3305fa14db0c3e5aedfd97da7c41139f4046b9b2ab00de6c550965a9dc7982bd52f7306eb239c2e516e287741c21bbfeb8981c49a
TLSH
T1EC71AAD4F725B899D472B907613F7284ACA22FE17CE1BC23C7163CD49E898D0CA26097
MD5 SHA1 SHA512 TLSH

Submit Download

vba68A9.tmp

Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vba68A9.tmp
Size 3KB
SHA256 9a725cab18e9dfeedacb06124a1759bd3b78730d4cde9ac476a697a1be3ffb89
MD5 ce7cc127821e2e8d2cb7449b19b0607f
SHA1 404cd55f34b31cda57f9b00cf3a77b77136128b2
SHA512 6b3da37ab15b4c2a1a6ae950706f88a427302908dd5e615d68570b65021a299347f6f2666acfe09fc6e8f720a22906e9b269aaf6cd78bbfed795a9686d319900
TLSH
T15F71AAD4F725B899D472B907613F7284ACA62FE17CE1BC23C7163CD49E898D0CA26097
MD5 SHA1 SHA512 TLSH

Submit Download

vba68BA.tmp

Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vba68BA.tmp
Size 3KB
SHA256 8a48691b5561deea52455c2255b5e8ca1ddeb6bc6e0ac37f527c148ef43d8d72
MD5 d69c079124b47416203288a066cfdd65
SHA1 1b0b9c98d202868b19b223d4233b25de8d5154c1
SHA512 cdf1df28de098eb2c7c8e76e053cf4537603e24bad8576b190b6d975821b9acca99aece8cf844f539c1ae7c05e46885ac17c87d1968d8c03c9f80cb942d6c44b
TLSH
T15D719AD4F725B899D476B907613F7284ACA22FE17CE1BC23D7163CD49E898D0CA26097
MD5 SHA1 SHA512 TLSH

Submit Download

vba8628.tmp

Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vba8628.tmp
Size 3KB
SHA256 3cdd050f3eefccaec5517c2ac787b93d2a7b784ad606ce47d97f0b2baf0b02c4
MD5 b3a5be64165fc842d3d396f24afe08b2
SHA1 6e80c9602135cfbad984a7143cd6190fd1dc2a4c
SHA512 782006e085ee5ac6af394b9d08f0c0ee7ac678c4f5334c36b6ffff7a82750f9a7887fa0c5313d77265ef56c3cc112ce145486fafd0d794ff03fd9170afee1db9
TLSH
T114819CD4F735B899D472B906613F7284ACA21EE17CE1BC23C7163CD89E898D0CA26097
MD5 SHA1 SHA512 TLSH

Submit Download

vba8639.tmp

Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vba8639.tmp
Size 3KB
SHA256 dc677380f0d50df47d4ef7a4497b20d348b652fdb0f7896b02cd7f7715184ae9
MD5 9fc9dc32b701af7561b89e5730446e85
SHA1 b77bb8181f187a4130bbc00c25992decb58f64e6
SHA512 a3e89ac45bfdf357a097cd37bde5524fd1089c7936eda72a382b4c759b90f52ed8fd6a8e535a951c746f12d55ebca777ce490946b43bb7124826b5ffac6d30fe
TLSH
T136819CD4F735B899D472B906613F7184ACA21EE17DE1BC23C7163CD89E898D0CA26097
MD5 SHA1 SHA512 TLSH

Submit Download

vba863A.tmp

Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vba863A.tmp
Size 3KB
SHA256 df9c9300b542490ec3f0860ec2687ce09009eb5725b8f7f6a09c4396d5443f5d
MD5 d145266e4a4df0baaf93f1ff9a222d56
SHA1 e864d1189fbe13d4d505d39419dcab2ae78f3cfc
SHA512 4c90ccb22a7bccdc0657ae98b084e2b8e9917149d95691f64528a76370adb3452defd11b896e7ab12d195390e72c044f13cdcae7b4cf81c1db408adc675e9af6
TLSH
T1E3819BD4F735B899D472B906613F7184ACA21EE17DE1BC23C7163CD89E898D0CA26097
MD5 SHA1 SHA512 TLSH

Submit Download

vbam.ini

Path C:\Users\Admin\AppData\Local\visualboyadvance-m\vbam.ini
Size 3KB
SHA256 a957765678538452677af2e393b7baa6be60206e3b16260b7fa715740f438c78
MD5 94d26b5890405d8d4d929fdcfe7651c3
SHA1 a0ea8f5aeb038e87cf6c0c787db0bff11a06f09c
SHA512 a0b46bde682fd96186bfe595b03a99080e148d671f8fb04e1205c125cf9d265667bf1eef6a1e59abeea93c8fae5f23e460fa6f352546768f8939d34391348821
TLSH
T1A1719BD4F725B899D476B907613F7284ACA22FE17DE1BC23C7163CD49E898D0CA26097
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads