b3e619831a024d0fc48b3765a5b89665bbf1fccf6d0973d5d321b01686dec1c1

General

Target
2026-07-04_bed60576efe133fbe180a7c1a7fc9152_blankgrabber_glassworm_icedid_luca-stealer_njrat
Size 12.4MB
Sample260704-brm35set5k
SHA256 b3e619831a024d0fc48b3765a5b89665bbf1fccf6d0973d5d321b01686dec1c1
MD5 bed60576efe133fbe180a7c1a7fc9152
SHA1 2ec02648b3a0a13e8a1d06ef37f56ab4d28df591
SHA512 35963ec7b6a267d28290217a313eea10b996ba7c672db4e6e9e6c0a48c479c6045ca358076dd08858e113d8d3e7644cfa3b9027f455462d8d010516c9226876f
SSDEEP 393216:Dm1mZ/91FJ7L5ZLrhKGJbdq1B7LfHsoqEbpiJ:q1md9h55rhK2g1Nnlbp
TLSH
T1DBD633BA11C30D92E4B7923D4AA16592C1E2FC502B20C99B0B947E7D2F372FD9D39B51
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

Malware Config

Targets

- Target
  2026-07-04_bed60576efe133fbe180a7c1a7fc9152_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 12.4MB
- SHA256 b3e619831a024d0fc48b3765a5b89665bbf1fccf6d0973d5d321b01686dec1c1
- MD5 bed60576efe133fbe180a7c1a7fc9152
- SHA1 2ec02648b3a0a13e8a1d06ef37f56ab4d28df591
- SHA512 35963ec7b6a267d28290217a313eea10b996ba7c672db4e6e9e6c0a48c479c6045ca358076dd08858e113d8d3e7644cfa3b9027f455462d8d010516c9226876f
- SSDEEP 393216:Dm1mZ/91FJ7L5ZLrhKGJbdq1B7LfHsoqEbpiJ:q1md9h55rhK2g1Nnlbp
- TLSH
  T1DBD633BA11C30D92E4B7923D4AA16592C1E2FC502B20C99B0B947E7D2F372FD9D39B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion themida trojan
- Detects executables packed with Themida
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
  defense_evasion
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Loads dropped DLL
- Themida packer
  Detects Themida, an advanced Windows software protection system.
  themida
- Checks whether UAC is enabled
  defense_evasion trojan
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

1

T1497

Credential Access

Discovery

Query Registry

2

T1012

System Information Discovery

2

T1082

Virtualization/Sandbox Evasion

1

T1497

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Detects executables packed with Themida

Identifies VirtualBox via ACPI registry values (likely anti-VM)

Checks BIOS information in registry

Loads dropped DLL

Themida packer

Checks whether UAC is enabled

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2