2026-05-28_7d888f10a341e1852f104140c2db4ac4_blankgrabber_coinminer_icedid_luca-stealer_njrat

General

Target
2026-05-28_7d888f10a341e1852f104140c2db4ac4_blankgrabber_coinminer_icedid_luca-stealer_njrat
Size 15.4MB
Sample260528-a7k32set4w
SHA256 a4f87e76f848891c74b1ce4898e62b1829c09015667d3b7f7220628c25ee4540
MD5 7d888f10a341e1852f104140c2db4ac4
SHA1 25ecdaace1d665e71c031be89e81a79c42d2ef1b
SHA512 166a277a97b86028c257bf0b49c6902db41a8f05abf5cee4512a685f322b14def669b1be71c2120bf45a6c45747d22620992b60bf91f7e60000a7da55799ea31
SSDEEP 393216:MP8b+hAJKv8Qk+C77ATscIR3bOqhiAdbKGT1t10kM:MP8PJo87AtIRJhiABWkM
TLSH
T17BF633A997D623F9C7F3737DE864EA6AE5323910171241C353B8B1EAAE0DCC01126F55
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-28_7d888f10a341e1852f104140c2db4ac4_blankgrabber_coinminer_icedid_luca-stealer_njrat

File Explorer

2026-05-28_7d888f10a341e1852f104140c2db4ac4_blankgrabber_coinminer_icedid_luca-stealer_njrat

.exe 15.4MB

2026-05-28_7d888f10a341e1852f104140c2db4ac4_blankgrabber_coinminer_icedid_luca-stealer_njrat

IMPHASH a3656bbffa9714d31826a3673caf978d
SHA256 a4f87e76f848891c74b1ce4898e62b1829c09015667d3b7f7220628c25ee4540
MD5 7d888f10a341e1852f104140c2db4ac4
SHA1 25ecdaace1d665e71c031be89e81a79c42d2ef1b
SHA512 166a277a97b86028c257bf0b49c6902db41a8f05abf5cee4512a685f322b14def669b1be71c2120bf45a6c45747d22620992b60bf91f7e60000a7da55799ea31
SSDEEP 393216:MP8b+hAJKv8Qk+C77ATscIR3bOqhiAdbKGT1t10kM:MP8PJo87AtIRJhiABWkM
TLSH
T17BF633A997D623F9C7F3737DE864EA6AE5323910171241C353B8B1EAAE0DCC01126F55
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

52900

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

SHFileOperationW SHGetFolderPathW CommandLineToArgvW

kernel32

WriteConsoleW HeapReAlloc CreateDirectoryW SetConsoleCtrlHandler AddDllDirectory GetCommandLineW GetStdHandle WriteFile GetShortPathNameW TerminateProcess GetModuleFileNameW SetEnvironmentVariableW K32GetModuleFileNameExW GetEnvironmentVariableW GetTempPathW WaitForSingleObject CreateFileW GetFileAttributesW GetModuleHandleA OpenProcess Sleep GetLastError CloseHandle GetProcAddress GetCurrentProcessId CreateProcessW WideCharToMultiByte GetSystemTimeAsFileTime FormatMessageA QueryPerformanceCounter SetDllDirectoryW LoadLibraryExW GetExitCodeProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsProcessorFeaturePresent GetCurrentThreadId InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW HeapSize RtlUnwindEx SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary EncodePointer RaiseException RtlPcToFileHeader ExitProcess GetModuleHandleExW GetCommandLineA HeapAlloc MultiByteToWideChar HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect LCMapStringW GetFileType GetStringTypeW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx

Name

.text

Size

141KB

Virtual Size

140KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

15.3MB

Virtual Size

15.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

169KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-05-28_7d888f10a341e1852f104140c2db4ac4_blankgrabber_coinminer_icedid_luca-stealer_njrat

shell32

kernel32

generic