General
- Target 2026-07-01_12e26d50e6391b12fbe2b789aeb3f1a6_blankgrabber_coinminer_icedid_luca-stealer_njrat
- Size 9.9MB
- Sample260702-ap8rdsgx7m
- SHA256 3ebbcdbec128ebd15ae1dd7d0499f88749b2794879c34916dd9cda4e788534b1
- MD5 12e26d50e6391b12fbe2b789aeb3f1a6
- SHA1 237750435c959db3d204286662a8d80e1a5e3136
- SHA512 ad622dbe2b7c06c74308d0aef4e2eb69216da835b05f92a74cd4db196d400d9ae9b57278a8caf6f59283c27d60d316d05b179ad32818f1d76b5cac544957fee7
- SSDEEP 196608:yPI08O8ySq+VMOPfrKr9BlbZqgbYNA9mowBcgJFN6NvTAg7ho/YMT6JaFUUetg:OE9ySF2rrlbZHYsmvBcgKs+humJqUUet
- TLSH T142A63392B1E261D4EE2E93B99CE813D19273F8056758C1EB03B0B46E0E715C45B3DB6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_12e26d50e6391b12fbe2b789aeb3f1a6_blankgrabber_coinminer_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_12e26d50e6391b12fbe2b789aeb3f1a6_blankgrabber_coinminer_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_12e26d50e6391b12fbe2b789aeb3f1a6_blankgrabber_coinminer_icedid_luca-stealer_njrat
- Size 9.9MB
- SHA256 3ebbcdbec128ebd15ae1dd7d0499f88749b2794879c34916dd9cda4e788534b1
- MD5 12e26d50e6391b12fbe2b789aeb3f1a6
- SHA1 237750435c959db3d204286662a8d80e1a5e3136
- SHA512 ad622dbe2b7c06c74308d0aef4e2eb69216da835b05f92a74cd4db196d400d9ae9b57278a8caf6f59283c27d60d316d05b179ad32818f1d76b5cac544957fee7
- SSDEEP 196608:yPI08O8ySq+VMOPfrKr9BlbZqgbYNA9mowBcgJFN6NvTAg7ho/YMT6JaFUUetg:OE9ySF2rrlbZHYsmvBcgKs+humJqUUet
- TLSH T142A63392B1E261D4EE2E93B99CE813D19273F8056758C1EB03B0B46E0E715C45B3DB6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Loads dropped DLL
-
Enumerates processes with tasklist