Analysis
- max time kernel
149s - max time network
100s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
19/05/2026, 23:17
Static task
static1
Behavioral task
behavioral1
Sample
2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe
Resource
win11-20260513-en
windows11-21h2-x64
2 signatures
150 seconds
General
- Target 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe
- Size 29.0MB
- Sample260519-291easf12p
- SHA256 4e798ffe82aad7e82060cc69f043d00fec606b3d4045a7134bec0be2bf6e435d
- MD5 ae69aefe8e34657bf068502f037e48bb
- SHA1 7ad8627339b20c0a3fb4c05695f35f3dea10365e
- SHA512 5aefd982f0b666a5bff736bbeb2b73ad3e71bb7382e451b903dcaf36e06466b343f0d807983c51ef66f9ac37090112c80e3ff9cf2787efd57ac1c80226ae91d4
- SSDEEP 196608:tPBjT9s7ajkqqIMDRWGs8bC5uxznlnZh0sPzT+FavqCqLiAUFoEeTv5Bx1rFFLOJ:tpjT9s+jpITnlnnJrgCqLiAUFoz5BFFk
- TLSH T119677C267FAC41D8E8A68479C9528B63E371FC193B614ADB00407956EF377E04E3A7D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 64 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\MicroDicom64.Application\DefaultIcon 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\MicroDicom64.Application\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe\" \"%1\"" 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Applications\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr64.exe\shell\open 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Applications\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr64.exe\SupportedTypes\.dcm 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Applications\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr64.exe\SupportedTypes\.dcm30 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Applications\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr64.exe\shell 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\microdicom\shell 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Applications\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr64.exe 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Applications\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr64.exe\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe\" \"%1\"" 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Applications\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr64.exe\SupportedTypes\.jpg 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\.zip\OpenWithList\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr64.exe 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Directory\shell\MicroDicom64\ = "Open with MicroDicom DICOM Viewer (64-bit)" 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\MicroDicom64.Application\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe,0" 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\MicroDicom64.Application\shell\open\command 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\.dmz 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\.dmz\OpenWithList 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\.dcm\OpenWithList\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr64.exe 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Directory\shell\MicroDicom64\Icon = "C:\\Users\\Admin\\AppData\\Local\\Temp\\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe" 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\.dcm\ = "MicroDicom64.Application" 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\microdicom\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe,0" 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Applications\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr64.exe\SupportedTypes\.gif 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Applications\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr64.exe\SupportedTypes\.tiff 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\.dmz\OpenWithList\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr64.exe\ 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\MicroDicom64.Application 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\MicroDicom64.Application\shell\print\command 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Applications\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr64.exe\shell\open\command 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Applications 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Applications\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr64.exe\SupportedTypes\.bmp 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Applications\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr64.exe\SupportedTypes\.wmf 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Directory\shell\MicroDicom64 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Directory 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\MicroDicom64.Application\shell\printto\command 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\microdicom\shell\open\command 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Applications\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr64.exe\SupportedTypes\.png 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\.zip 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Directory\shell 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Directory\shell\MicroDicom64\command 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Directory\shell\MicroDicom64\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe\" \"%1\"" 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\.dcm30\ = "MicroDicom64.Application" 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\microdicom\shell\open 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\MicroDicom64.Application\shell\open 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\microdicom\DefaultIcon 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Applications\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr64.exe\SupportedTypes\.emf 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\.dcm\OpenWithList 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\.dcm30 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\.dcm30\OpenWithList\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr64.exe\ 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\microdicom\URL Protocol 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\.dcm\OpenWithList\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr64.exe\ 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\.dcm30\OpenWithList 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\.zip\OpenWithList 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Applications\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr64.exe\SupportedTypes\.jpeg 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Applications\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr64.exe\SupportedTypes\.jpe 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\.dcm 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\.zip\OpenWithList\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr64.exe\ 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\.dcm30\ 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\MicroDicom64.Application\shell\print\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe /p \"%1\"" 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\MicroDicom64.Application\shell\printto\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe /pt \"%1\" \"%2\" \"%3\" \"%4\"" 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\.dcm\ 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\MicroDicom64.Application\shell 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Applications\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr64.exe\SupportedTypes\.tif 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\.dmz\OpenWithList\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr64.exe 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\MicroDicom64.Application\ = "MicroDicom DICOM file" 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Set value (str) \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\microdicom\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe\" \"%1\"" 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\.dcm30\OpenWithList\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr64.exe 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1480 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe 1480 2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-19_ae69aefe8e34657bf068502f037e48bb_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njr.exe"1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1480