Analysis
- max time kernel
149s - max time network
149s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
06/05/2026, 14:33
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-06_c2cb0c60e990fb0cbbd83998a85f3000_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-06_c2cb0c60e990fb0cbbd83998a85f3000_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11-20260130-en
3 signatures
150 seconds
General
- Target 2026-05-06_c2cb0c60e990fb0cbbd83998a85f3000_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc.exe
- Size 6.7MB
- Sample260506-rwxfdacz21
- SHA256 4b47a183bff2c1df415a6c80801760fb2599c4c7f31f28fad9d4bc1934bcbdad
- MD5 c2cb0c60e990fb0cbbd83998a85f3000
- SHA1 364105f7f375a703c3f9169b174e564b90f77c3f
- SHA512 427df16f14ab9e245b13151d1358677f57cec6c6e0ce2bc77b6e583f18a64404a76cc1b75ee31e79245a0db5a0051a39c5d6782031fd590e33eea560ff5f2492
- SSDEEP 98304:ouV2CnXGWTRBI93z63Fx/hi8EzmBmhzA2ZpXGPIy6:oyWWTRBI93z63FxEFmBmhzA2ZpXG
- TLSH T117667BC7AD675AE8E292D638B8B63317F56733690B24C6FF11D01DA16B063C0166B34E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 4688 2026-05-06_c2cb0c60e990fb0cbbd83998a85f3000_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc.exe 4688 2026-05-06_c2cb0c60e990fb0cbbd83998a85f3000_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc.exe 4688 2026-05-06_c2cb0c60e990fb0cbbd83998a85f3000_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc.exe 4688 2026-05-06_c2cb0c60e990fb0cbbd83998a85f3000_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc.exe 4688 2026-05-06_c2cb0c60e990fb0cbbd83998a85f3000_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc.exe 4688 2026-05-06_c2cb0c60e990fb0cbbd83998a85f3000_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4688 2026-05-06_c2cb0c60e990fb0cbbd83998a85f3000_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4688 2026-05-06_c2cb0c60e990fb0cbbd83998a85f3000_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-06_c2cb0c60e990fb0cbbd83998a85f3000_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-06_c2cb0c60e990fb0cbbd83998a85f3000_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:4688