General
- Target 2026-07-02_9fc572792280d64a23d9d718c378af66_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 8.0MB
- Sample260702-3r4vfads7j
- SHA256 2c0b15ef9d84bc8e547e2824d54dab7ac051eeb74892f26e188a7b8881b84892
- MD5 9fc572792280d64a23d9d718c378af66
- SHA1 e31fdacb2a9eea1e3f4635007470412abfa5eb97
- SHA512 963432547b5682e3d4655d413117dc6411f714c2a03c4977dea9311d4232f6d6dd7f982beef32d88763b67a6ad315e2667b7ddea418b9659899b4ceaae7ca7d0
- SSDEEP 196608:cQZhbrsW4gXyvntTFqq8N3tZHsGXqYhpXFSFK7E:cQZxrktZq5XZHsGXqm7SP
- TLSH T180863358A3D018A7E8A7623C9FE3D156E7A1BD121721CDDF13A173392F73690483A69C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-02_9fc572792280d64a23d9d718c378af66_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_9fc572792280d64a23d9d718c378af66_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_9fc572792280d64a23d9d718c378af66_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 8.0MB
- SHA256 2c0b15ef9d84bc8e547e2824d54dab7ac051eeb74892f26e188a7b8881b84892
- MD5 9fc572792280d64a23d9d718c378af66
- SHA1 e31fdacb2a9eea1e3f4635007470412abfa5eb97
- SHA512 963432547b5682e3d4655d413117dc6411f714c2a03c4977dea9311d4232f6d6dd7f982beef32d88763b67a6ad315e2667b7ddea418b9659899b4ceaae7ca7d0
- SSDEEP 196608:cQZhbrsW4gXyvntTFqq8N3tZHsGXqYhpXFSFK7E:cQZxrktZq5XZHsGXqm7SP
- TLSH T180863358A3D018A7E8A7623C9FE3D156E7A1BD121721CDDF13A173392F73690483A69C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.