General
- Target 2026-07-02_ee9f4a1573bd331eb31e1cb0c167c90e_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 22.6MB
- Sample260702-xv2llahx5m
- SHA256 487d2c963e8b84a4601e6ee774f2b90ed73fcdabd3a359b79580e17d5d3d7750
- MD5 ee9f4a1573bd331eb31e1cb0c167c90e
- SHA1 7a0e9d5f6502a8100664c92db497f63fa66b880d
- SHA512 fc43f04f4126d9e1a8e54b5907b31c43410f9d14cbcc731fcb94e1dad48663c2b58cc8b0be55d92919edeb2bd2465770508a8b538f76cbc86b7a777221d82fd4
- SSDEEP 393216:GYkGP02vHpUZ5b4rdG/W8PB1CMw1r+8ADtAirA0QqFd+gQpBO4qev3Bp0BC:QY0W0b4YW8DCMw1LgtAiKqjLQPrqe/BG
- TLSH T17437338DFB4409D5E4D9E335C992912253F2B8D21BB0869F93FC3D5A1CA32C49E7A724
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-02_ee9f4a1573bd331eb31e1cb0c167c90e_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_ee9f4a1573bd331eb31e1cb0c167c90e_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_ee9f4a1573bd331eb31e1cb0c167c90e_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 22.6MB
- SHA256 487d2c963e8b84a4601e6ee774f2b90ed73fcdabd3a359b79580e17d5d3d7750
- MD5 ee9f4a1573bd331eb31e1cb0c167c90e
- SHA1 7a0e9d5f6502a8100664c92db497f63fa66b880d
- SHA512 fc43f04f4126d9e1a8e54b5907b31c43410f9d14cbcc731fcb94e1dad48663c2b58cc8b0be55d92919edeb2bd2465770508a8b538f76cbc86b7a777221d82fd4
- SSDEEP 393216:GYkGP02vHpUZ5b4rdG/W8PB1CMw1r+8ADtAirA0QqFd+gQpBO4qev3Bp0BC:QY0W0b4YW8DCMw1LgtAiKqjLQPrqe/BG
- TLSH T17437338DFB4409D5E4D9E335C992912253F2B8D21BB0869F93FC3D5A1CA32C49E7A724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.