Overview

overview

7

Static

static

3

2026-11-06...at.exe

windows10-2004-x64

7

2026-11-06...at.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    143s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    07/11/2026, 19:34

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-11-06_ed48c96d1b2799ea17ae319a29230f0d_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
  • Size 34.8MB
  • Sample261107-yadjps1vcw
  • SHA256 658658ffcb534199e0da32a1de92519bb73aa4ca44ef2d7db54af02f2cf8599a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 22 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-11-06_ed48c96d1b2799ea17ae319a29230f0d_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-11-06_ed48c96d1b2799ea17ae319a29230f0d_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4852
    • C:\Users\Admin\AppData\Local\Temp\2026-11-06_ed48c96d1b2799ea17ae319a29230f0d_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-11-06_ed48c96d1b2799ea17ae319a29230f0d_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: GetForegroundWindowSpam
      PID:5288

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        MSVCP140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\PyQt6\Qt6\bin\MSVCP140.dll
        • Size 576KB
        • SHA256 88f55d86b50b0a7e55e71ad2d8f7552146ba26e927230daf2e26ad3a971973c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MSVCP140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\PyQt6\Qt6\bin\MSVCP140_1.dll
        • Size 30KB
        • SHA256 446c48c1224c289bd3080087fe15d6759416d64f4136addf30086abd5415d83f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MSVCP140_2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\PyQt6\Qt6\bin\MSVCP140_2.dll
        • Size 188KB
        • SHA256 24b47c966b6e4a65b3e4df866d347d3427e9bd709be550c38224427eb5e143d3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Core.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\PyQt6\Qt6\bin\Qt6Core.dll
        • Size 9.6MB
        • SHA256 0b0474bfb1d3465a597a51cd383d9c7d502f4b5e15f66b09956390c33ac406ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Gui.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\PyQt6\Qt6\bin\Qt6Gui.dll
        • Size 9.0MB
        • SHA256 25d6b5e9ccb63ab225a02e5da54902229350de5188e8352c918ec25bd3130da2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Widgets.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\PyQt6\Qt6\bin\Qt6Widgets.dll
        • Size 6.2MB
        • SHA256 dbaffac274d96c4adadb170287ad46791e3ca34a546e4f7ee6b306fd6b921465
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\PyQt6\Qt6\bin\VCRUNTIME140_1.dll
        • Size 43KB
        • SHA256 1f0f5f2ce671e0f68cf96176721df0e5e6f527c8ca9cfa98aa875b5a3816d460
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qsvgicon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\PyQt6\Qt6\plugins\iconengines\qsvgicon.dll
        • Size 76KB
        • SHA256 a781b11368845776105841cd4d0b3e434cd1210c42a0c47b67573f9afc8657f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qgif.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\PyQt6\Qt6\plugins\imageformats\qgif.dll
        • Size 46KB
        • SHA256 234a37c9ae7ecd0cf81016f2324d58aca20c5b6f4290773bb46de8db3f07e1be
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qicns.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\PyQt6\Qt6\plugins\imageformats\qicns.dll
        • Size 54KB
        • SHA256 81d609546881e1f53954ad5dd67c659bbe84f3e2637e6a5e5a306165031a4865
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qico.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\PyQt6\Qt6\plugins\imageformats\qico.dll
        • Size 45KB
        • SHA256 281400c1491ccc3858642bc3d698b0f183c72fe1488896e80709c2a38fa2c0f0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qjpeg.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\PyQt6\Qt6\plugins\imageformats\qjpeg.dll
        • Size 562KB
        • SHA256 ed814c0b91466feeb718e6e66cf84e06229e0c56e1257c19def49158bedfd0fd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qpdf.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\PyQt6\Qt6\plugins\imageformats\qpdf.dll
        • Size 40KB
        • SHA256 c8a3b79606f0d3fdaaf7be3601b9971df334775659a3aca0c954852c7480e3b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qsvg.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\PyQt6\Qt6\plugins\imageformats\qsvg.dll
        • Size 38KB
        • SHA256 720168af4c0b77792dc4dfcfceb4ac1181d9b249e69ea0d5b6c07cbf68e4ab26
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qtga.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\PyQt6\Qt6\plugins\imageformats\qtga.dll
        • Size 37KB
        • SHA256 248d10ed06024c4392f1f7b7765e8ef5508b005912e337fad58fafbf4e008dd3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qtiff.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\PyQt6\Qt6\plugins\imageformats\qtiff.dll
        • Size 429KB
        • SHA256 7b32c8272c199daf42a9a6b97141bd53782adfb25af0e2e6cb7dccbe26f8ef8e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qwbmp.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\PyQt6\Qt6\plugins\imageformats\qwbmp.dll
        • Size 36KB
        • SHA256 d6c049119eb5d22777b645f11636e6158c713d5b153c3d3f0c6b46719a09b377
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qwebp.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\PyQt6\Qt6\plugins\imageformats\qwebp.dll
        • Size 549KB
        • SHA256 b3f8be394470cfb838d19c7efc861ffbfe814d813cf6ee264e22aed49bcef22a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qminimal.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\PyQt6\Qt6\plugins\platforms\qminimal.dll
        • Size 59KB
        • SHA256 2b38c2183b39a9a20763aa2098e28608a1468b7a3c8bdaf6aa570f48dd6b3701
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qoffscreen.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\PyQt6\Qt6\plugins\platforms\qoffscreen.dll
        • Size 108KB
        • SHA256 8819553a045e852d7910387b6d947cb85a50c7c5a20818bcd3a712401ab8068d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qwindows.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\PyQt6\Qt6\plugins\platforms\qwindows.dll
        • Size 904KB
        • SHA256 59fd19f3cc6f6b1e72134400451d9b6681f65732f8989cdfeda1570af168921d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qmodernwindowsstyle.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\PyQt6\Qt6\plugins\styles\qmodernwindowsstyle.dll
        • Size 212KB
        • SHA256 9b5ac8bbd61f12f03598cac505070aaae5b14f08371eb0cb64b54ece13000110
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtCore.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\PyQt6\QtCore.pyd
        • Size 2.4MB
        • SHA256 5f24ce426fa4f2e4f7d0987ad136a95d09fa244e13408b5287e5895bd76d56c1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtGui.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\PyQt6\QtGui.pyd
        • Size 2.2MB
        • SHA256 6191700bf33248bddeb0018107982c1686e304869f906b690bff38ac3af66c93
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtWidgets.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\PyQt6\QtWidgets.pyd
        • Size 4.8MB
        • SHA256 b514c42c012101bd70a2baca65ca7757faf605992cec440e7802a1b21c2f967b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sip.cp313-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\PyQt6\sip.cp313-win_amd64.pyd
        • Size 108KB
        • SHA256 06a9913d4ceba21902f21d1838ee792adc6e90756ddcb55432c1e40a272e6c16
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\_bz2.pyd
        • Size 83KB
        • SHA256 965f199679afa9b31d537d98c3ca8403afd6b9e58e1a463ae47697ae4bf12771
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\_ctypes.pyd
        • Size 129KB
        • SHA256 697d05cac7c167c00ccf22ea4fdbc7a8db93ab9c6421061191558e42478068c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\_lzma.pyd
        • Size 156KB
        • SHA256 b78f5a8476139ff04731046459efd047bb8f52dc92c5b2082eabf2929c0ca02d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\base_library.zip
        • Size 1.2MB
        • SHA256 19153a4195969cf92869c7b79c31fb9d794f71e1ff05ae8eb2e794f51bd46734
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.DLL
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\python3.DLL
        • Size 70KB
        • SHA256 85d02d4c7e28c0f183415dc2be5fe8e06aa7fa0567673c75c65c0031f59e1e8b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python313.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\python313.dll
        • Size 5.8MB
        • SHA256 0565965617d94274d7f2c2958d0bef33392cd9d2f346f99d8e1bedbdf264ee85
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        GOD.png
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\resource\GOD.png
        • Size 7KB
        • SHA256 f701b029773babea10a91d695b8134ab4de14a4f6fa19b642dbaadcefe620823
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        boosty.png
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\resource\boosty.png
        • Size 4KB
        • SHA256 46e9d692dbaa713f32d6376e61afa9d47528ec386dd8263465b9f57c2eb834ca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        icon.png
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\resource\icon.png
        • Size 2KB
        • SHA256 9fa90818aee99b4ff2ddfbbfadff4be15afa5e5dd03b4baf6503b28e54d83150
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        jorj.jpg
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\resource\jorj.jpg
        • Size 26KB
        • SHA256 09753d5ba23190176c2970841693a7452063a3a471d320ab36203e6984bd6389
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        menu.png
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\resource\menu.png
        • Size 2KB
        • SHA256 9ba5b9c59b33dd0d167cce0fd769a43ba01e611b5ea047032f9d7514bb23ed70
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        new_background.jpg
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\resource\new_background.jpg
        • Size 167KB
        • SHA256 5b6b609ec4a351d9bde6225f575821e998f6115d6d01098e88274399e9624185
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        steam.png
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\resource\steam.png
        • Size 2KB
        • SHA256 8e79ad1b5f536c3099abd99758821cdaf7d330a74168b431db1b4d51dca650ad
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        telegramm.png
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI48522\resource\telegramm.png
        • Size 4KB
        • SHA256 878344c26546eec7ba7d384aae01d29eb2b2fc20c73da21c251126b93969f1d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/5288-181-0x00007FFAA9850000-0x00007FFAA9AC3000-memory.dmp
        Download

        memory/5288-195-0x00007FFA9CEA0000-0x00007FFA9D4DD000-memory.dmp
        Download

        memory/5288-194-0x00007FFA9DE00000-0x00007FFA9E2D7000-memory.dmp
        Download

        memory/5288-202-0x000002D620D50000-0x000002D620D60000-memory.dmp
        Download

        memory/5288-198-0x00007FFAA0960000-0x00007FFAA0B8E000-memory.dmp
        Download

        memory/5288-228-0x000002D620D50000-0x000002D620D60000-memory.dmp
        Download