General
- Target 2026-06-06_1b2493ea77aa43d213fc844252244728_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 12.6MB
- Sample260606-basx3ags3t
- SHA256 0c9a688b75595f70a1c390e0ea637740a3291c4e621ba8831e18d01025742b98
- MD5 1b2493ea77aa43d213fc844252244728
- SHA1 7eeec5d6abfbb3456ecd58cd9046bb240983c5a2
- SHA512 2c76f211823c4684fce5ba35768d1bb8f37673870c0534bc8ad858ad379a99d82bfcbc3b3e2c48cef53e6d55a07df23b6bf1525ad03f594777a02a9083eb9406
- SSDEEP 393216:eVKW8u1+TtIiF1uARuA2FXmPdS9QVlquEH:zW8u1QtIGuAGKsMcuEH
- TLSH T1B4D63399B7E604E9E4DE923F92E94257A39274F2476892CB67E00C061F275F0DF35B02
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-06_1b2493ea77aa43d213fc844252244728_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
25 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-06_1b2493ea77aa43d213fc844252244728_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11-20260513-en
23 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-06_1b2493ea77aa43d213fc844252244728_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 12.6MB
- SHA256 0c9a688b75595f70a1c390e0ea637740a3291c4e621ba8831e18d01025742b98
- MD5 1b2493ea77aa43d213fc844252244728
- SHA1 7eeec5d6abfbb3456ecd58cd9046bb240983c5a2
- SHA512 2c76f211823c4684fce5ba35768d1bb8f37673870c0534bc8ad858ad379a99d82bfcbc3b3e2c48cef53e6d55a07df23b6bf1525ad03f594777a02a9083eb9406
- SSDEEP 393216:eVKW8u1+TtIiF1uARuA2FXmPdS9QVlquEH:zW8u1QtIGuAGKsMcuEH
- TLSH T1B4D63399B7E604E9E4DE923F92E94257A39274F2476892CB67E00C061F275F0DF35B02
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops startup file
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application
Drops file in System32 directory
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Modify Registry
1