General
- Target 2026-05-17_ec80cb3f25ba05d6c146a7c0243d7c0f_blankgrabber_coinminer_icedid_luca-stealer_njrat
- Size 17.8MB
- Sample260517-rlwfbshx7x
- SHA256 6291543623448b3889845c45099fab31c726147a000c08ee499dd573d585a332
- MD5 ec80cb3f25ba05d6c146a7c0243d7c0f
- SHA1 c9f1384bb24a7583f0409c9e810ea9ade16209e7
- SHA512 880145a22bca9a6fa085a15beda67b3f77e5f3df863bae1c4f2f549a8151d05f8dd7ed3d30c40410e163d141cca400c869892950ad7d5525624f9784d16829b6
- SSDEEP 393216:59Fc6xNcoae90Or5g0/58R+zGkqc6qFw2:dcvEOOqH+KkZ6A
- TLSH T1641733285DF46CD8D6A640BD499242A1F637389903A141EB0971B4F6CF33FD0AE2DB5D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-17_ec80cb3f25ba05d6c146a7c0243d7c0f_blankgrabber_coinminer_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-17_ec80cb3f25ba05d6c146a7c0243d7c0f_blankgrabber_coinminer_icedid_luca-stealer_njrat.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-17_ec80cb3f25ba05d6c146a7c0243d7c0f_blankgrabber_coinminer_icedid_luca-stealer_njrat
- Size 17.8MB
- SHA256 6291543623448b3889845c45099fab31c726147a000c08ee499dd573d585a332
- MD5 ec80cb3f25ba05d6c146a7c0243d7c0f
- SHA1 c9f1384bb24a7583f0409c9e810ea9ade16209e7
- SHA512 880145a22bca9a6fa085a15beda67b3f77e5f3df863bae1c4f2f549a8151d05f8dd7ed3d30c40410e163d141cca400c869892950ad7d5525624f9784d16829b6
- SSDEEP 393216:59Fc6xNcoae90Or5g0/58R+zGkqc6qFw2:dcvEOOqH+KkZ6A
- TLSH T1641733285DF46CD8D6A640BD499242A1F637389903A141EB0971B4F6CF33FD0AE2DB5D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10Enumerates VirtualBox registry keys
Looks for VMWare services registry key.
Loads dropped DLL
Modifies boot configuration data using bcdedit