Overview

overview

7

Static

static

3

2026-10-29...ar.exe

windows10-2004-x64

7

2026-10-29...ar.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    126s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    29/10/2026, 17:15

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-10-29_11560841e54b001dc20066f12ecdbcec_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
  • Size 16.4MB
  • Sample261029-vsr82abg74
  • SHA256 f341744414cfab8be43cceb8d947ba5e14acb2d0fe86e109236285e87827136c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 29 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-10-29_11560841e54b001dc20066f12ecdbcec_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-10-29_11560841e54b001dc20066f12ecdbcec_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1876
    • C:\Users\Admin\AppData\Local\Temp\2026-10-29_11560841e54b001dc20066f12ecdbcec_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-10-29_11560841e54b001dc20066f12ecdbcec_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar.exe"
      2⤵
      • Loads dropped DLL
      PID:1468

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        LIBBZ2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\LIBBZ2.dll
        • Size 81KB
        • SHA256 25a4aae35dd89709620106db311af5bca7c868182b961e106a895ae14d2fc98a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MSVCP140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\MSVCP140.dll
        • Size 562KB
        • SHA256 9057d39b36b6c7d054865ee2bf9cde7a490fe3b01ec4e82514687e24f576269f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 da72e6677bd1bcd01c453c1998aaa19aeaf6659f4774cf6848409da8232a95b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 26e470b29bed3d873e0c328186e53f95e9edbfe0b0fd0cda44743a0b1a04a828
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _brotli.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\_brotli.cp312-win_amd64.pyd
        • Size 743KB
        • SHA256 4fba3d3ad5152b672cb3bf6d69ba92af29f619b45b61fba550fc4d103dc3ab7f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\_bz2.pyd
        • Size 35KB
        • SHA256 f8fa8bd93f8265e84fde9494977ec8758935a5bd6d54020dd32ec224923c8bc4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\_ctypes.pyd
        • Size 130KB
        • SHA256 a6fc367add20302ad30930b9c7ea19b4d0043a872193146c385edf67a1f5b494
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\_hashlib.pyd
        • Size 61KB
        • SHA256 67025e3fccc781bf02df420ec1c72e7d1c5f1a56f429ed476d7f8327038c985d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\_lzma.pyd
        • Size 47KB
        • SHA256 9acca2c7c6dd8dea69fc96d51e385ebfc0008fe86bc783524897f46937118385
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\_queue.pyd
        • Size 31KB
        • SHA256 a2f8cb1078dc753f804406b184dea8a618a76981df7cee08f0bc3f5d4dadb6ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\_socket.pyd
        • Size 83KB
        • SHA256 6f89c506bcb571747681bc7d4ca9e48308ead86535ccc99cc0368757a48c2115
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\_ssl.pyd
        • Size 177KB
        • SHA256 333c2abcab47a0af7d2647ed68e7c95fa049eac4fc7250fd307f8eae69a0b509
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _wmi.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\_wmi.pyd
        • Size 35KB
        • SHA256 cfa317b1472dcf226bd4919b100c050b1173492ea859f3636b67f7f0168aa0ae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\base_library.zip
        • Size 1.3MB
        • SHA256 6e3912d018bf99be4dda6762352e3f6d724dd820b2bffaccc0d4b8e2a529ff6f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ffi.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\ffi.dll
        • Size 39KB
        • SHA256 eb22fc95044ce939910d41857445bd0ecc4fc4d810ba30cc6b5f7f55b48ac8ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3-x64.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\libcrypto-3-x64.dll
        • Size 5.0MB
        • SHA256 630b0735e0a3ec5824084698a78d2043326bc133a5d579aa0f41cf0b5a92ddb6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        liblzma.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\liblzma.dll
        • Size 193KB
        • SHA256 b8cf9fe6d3eaaff6fcebce37947660297762f2f4dde503f7f56ce6475c439abd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-3-x64.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\libssl-3-x64.dll
        • Size 771KB
        • SHA256 6e5b7523862f5b85c4ec877e42d9e21fcd3ab0e57fd9504ac5c3557862f94f8a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _elementpath.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\lxml\_elementpath.cp312-win_amd64.pyd
        • Size 128KB
        • SHA256 1964c14d6a1005e117e1089d9d5588e64ec3e4a673abc93b0996da02dfe2df26
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        etree.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\lxml\etree.cp312-win_amd64.pyd
        • Size 3.7MB
        • SHA256 c8355bebca3ecb689becac77e419f6f34b593898bc0adcd07137d6327ac7db10
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\python3.dll
        • Size 66KB
        • SHA256 b550431259ca5ba5b70b41f9de4de8381d5e249cf653bfc45f4578a1b9999c66
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python312.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\python312.dll
        • Size 7.1MB
        • SHA256 17115c5fa12407d0d58d5f17634c43c836d383e1c700cc252f5860fdf360a820
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\select.pyd
        • Size 29KB
        • SHA256 c4d0b830541de5e965baf5b41e7b79a3d14646698eb70e0f31e243580acc4f48
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\ucrtbase.dll
        • Size 1.1MB
        • SHA256 91d027417ff2301b7135e864a5df6693488f8412ff87040f4897e0e03bc2577b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\unicodedata.pyd
        • Size 1.1MB
        • SHA256 4581be02051ad8930a5d93b874699a4829bd26833fa032ec0c54a13ee73ab1f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zlib.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\zlib.dll
        • Size 97KB
        • SHA256 8dbfd6ef7374a831158bddccb79e3d5665e9625c81af557f15b4150b7877f687
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        backend_c.cp312-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\zstandard\backend_c.cp312-win_amd64.pyd
        • Size 92KB
        • SHA256 cf5b083ce4c8166634b0a1d7f3d664e68e5e3c242119204218e0d0d8493228ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zstd.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI18762\zstd.dll
        • Size 650KB
        • SHA256 be5a011e36657a266e96bf287cf4ff806dcec43b5b720bb1e80d10a28f91f294
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download