2026-05-23_ca131cab6047b6d2284aee20d7000710_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

General

Target
2026-05-23_ca131cab6047b6d2284aee20d7000710_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
Size 1.2MB
Sample260523-ebf7faey9t
SHA256 257dc3dd66624de5cd88d3ad8c77abf3ef504c428df071baf8ceff4130dec3e0
MD5 ca131cab6047b6d2284aee20d7000710
SHA1 96457461496eef9b4a840d175b3f69f862f6a2e3
SHA512 c5f0b9624f7db805da2565bc663c332db425f0211d59c62551256ec4f146eab2ae0795d8eaab2b027bac6ce65737bb4075de6d2409da8a2346488963d0e466b2
SSDEEP 24576:yGtlq+BKr3zC9S3L1/f9VYY0rR7n6BZiA:yGtlq+BDG/fn8r5n6BZt
TLSH
T104457C45A3B501E8E5B79538CEA24616EBB27C151730DBDF23A0564F1F73AD0AE3A321
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-23_ca131cab6047b6d2284aee20d7000710_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

File Explorer

2026-05-23_ca131cab6047b6d2284aee20d7000710_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

.exe 1.2MB

2026-05-23_ca131cab6047b6d2284aee20d7000710_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

IMPHASH 61a9e3a91ab9ed81833ff82036409461
SHA256 257dc3dd66624de5cd88d3ad8c77abf3ef504c428df071baf8ceff4130dec3e0
MD5 ca131cab6047b6d2284aee20d7000710
SHA1 96457461496eef9b4a840d175b3f69f862f6a2e3
SHA512 c5f0b9624f7db805da2565bc663c332db425f0211d59c62551256ec4f146eab2ae0795d8eaab2b027bac6ce65737bb4075de6d2409da8a2346488963d0e466b2
SSDEEP 24576:yGtlq+BKr3zC9S3L1/f9VYY0rR7n6BZiA:yGtlq+BDG/fn8r5n6BZt
TLSH
T104457C45A3B501E8E5B79538CEA24616EBB27C151730DBDF23A0564F1F73AD0AE3A321
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

616308

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\FastCopy\x64\Obj\Release\FastCopy.pdb

kernel32

CreateDirectoryW GetFullPathNameW GetFileAttributesW GetUserDefaultLCID DeleteFileW MoveFileExW CopyFileW MoveFileW ReadFile GetVolumeInformationW CancelIo TlsSetValue SetLastError EnterCriticalSection FindNextFileW WriteFile GetDiskFreeSpaceW SetFileTime SetThreadPriority LeaveCriticalSection InitializeCriticalSection FindClose WaitForSingleObject CreateFileW GetCurrentThreadId SuspendThread ResumeThread SetFileAttributesW Sleep GetFileInformationByHandle FormatMessageW LocalFileTimeToFileTime GetLastError FileTimeToSystemTime GetCurrentThread TerminateThread TlsAlloc CloseHandle GetLocalTime GetOverlappedResult DeleteCriticalSection SystemTimeToFileTime TlsGetValue SystemTimeToTzSpecificLocalTime TlsFree CreateEventA GetTickCount GetDriveTypeW SetFilePointer SetEndOfFile FlushFileBuffers GetFileSizeEx BackupRead BackupSeek GetFileTime BackupWrite CreateHardLinkW SetFilePointerEx SetFileValidData FindFirstFileW CreateMutexA ReleaseMutex GetFileSize GetSystemTimeAsFileTime SetDllDirectoryW SetPriorityClass GetCommandLineW SetSystemPowerState GetCurrentProcess GetThreadLocale CreatePipe DuplicateHandle GetModuleHandleA OpenProcess ProcessIdToSessionId TzSpecificLocalTimeToSystemTime GetCurrentProcessId SetThreadExecutionState GetSystemTime GetLongPathNameW GetFileAttributesExW CreateProcessW GetStdHandle SetConsoleMode GetConsoleMode WriteConsoleW GetTempPathW GetCurrentDirectoryW SetCurrentDirectoryW GetProcAddress FreeLibrary UnmapViewOfFile OpenMutexA CreateFileMappingA MapViewOfFile DeviceIoControl RemoveDirectoryW FindFirstChangeNotificationW GetVolumeNameForVolumeMountPointW FindCloseChangeNotification FindNextChangeNotification GetEnvironmentVariableW HeapSize GetConsoleOutputCP SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetCommandLineA GetOEMCP GetACP VirtualFree VirtualAlloc GetModuleFileNameW SetEvent GetVersionExA GetModuleHandleW GetEnvironmentStringsW IsDebuggerPresent WriteConsoleA OutputDebugStringA AttachConsole OutputDebugStringW FreeConsole GetFileType AllocConsole SetThreadLocale FindFirstFileExW GetSystemDirectoryW GetExitCodeThread GlobalAlloc GlobalFree LoadLibraryW GlobalLock MultiByteToWideChar WideCharToMultiByte CreateMutexW GlobalMemoryStatusEx ExitProcess GetModuleFileNameA RtlCaptureStackBackTrace GetModuleHandleExA RaiseException K32GetModuleInformation CreateThread IsBadReadPtr SetUnhandledExceptionFilter SizeofResource FindResourceA LockResource LoadResource GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA LCMapStringEx InitializeCriticalSectionEx EncodePointer DecodePointer CompareStringEx GetCPInfo GetStringTypeW ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter InitializeSListHead RtlUnwindEx RtlPcToFileHeader InitializeCriticalSectionAndSpinCount LoadLibraryExW ExitThread FreeLibraryAndExitThread GetModuleHandleExW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetLocaleInfoW IsValidLocale EnumSystemLocalesW HeapReAlloc IsValidCodePage

oleaut32

SafeArrayGetUBound SafeArrayGetElement SafeArrayGetLBound VariantInit SysAllocString SafeArrayPutElement SafeArrayCreateVector VariantClear SysFreeString

Name

.text

Size

757KB

Virtual Size

757KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

231KB

Virtual Size

230KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

375KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

33KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

145KB

Virtual Size

145KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-05-23_ca131cab6047b6d2284aee20d7000710_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

kernel32

oleaut32

generic