2026-07-06_04dd0d2940d5e557c1e5467df11c1291_akira_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-06_04dd0d2940d5e557c1e5467df11c1291_akira_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc
Size 2.6MB
Sample260706-mpmkdady2t
SHA256 a00d8fc65bcbeeb799a86dd188d28ccefb1d204b2174a71d9e1af1bf2d0faceb
MD5 04dd0d2940d5e557c1e5467df11c1291
SHA1 5b32ca6b9c3e8d5a3a10159bcdef243c2c9a5ea9
SHA512 c93a44a7e5fb7a4e4892a6343420c52b7a4bdcd3ae44e82251a3ddb0f5258b5cb279c136b14bf64beb3d73adbfbae6017541870e356d73df0cec5fc75075a99c
SSDEEP 49152:ereKbuxYTmjR5J0nsaYOas0XsnPzhCLmrNZQYqCQFpKhXcPnyw:hjX2sw0XsnPzhCLmH6p
TLSH
T130C59F26A3A801ECD0B6D1B8C9465947E7B27C05437867DF06E0BA962F336E15E3F712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-06_04dd0d2940d5e557c1e5467df11c1291_akira_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc

File Explorer

2026-07-06_04dd0d2940d5e557c1e5467df11c1291_akira_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc

.exe 2.6MB

2026-07-06_04dd0d2940d5e557c1e5467df11c1291_akira_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc

IMPHASH 11423193860db1d3291bbf6aacb4c3a1
SHA256 a00d8fc65bcbeeb799a86dd188d28ccefb1d204b2174a71d9e1af1bf2d0faceb
MD5 04dd0d2940d5e557c1e5467df11c1291
SHA1 5b32ca6b9c3e8d5a3a10159bcdef243c2c9a5ea9
SHA512 c93a44a7e5fb7a4e4892a6343420c52b7a4bdcd3ae44e82251a3ddb0f5258b5cb279c136b14bf64beb3d73adbfbae6017541870e356d73df0cec5fc75075a99c
SSDEEP 49152:ereKbuxYTmjR5J0nsaYOas0XsnPzhCLmrNZQYqCQFpKhXcPnyw:hjX2sw0XsnPzhCLmH6p
TLSH
T130C59F26A3A801ECD0B6D1B8C9465947E7B27C05437867DF06E0BA962F336E15E3F712
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2580480

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ws2_32

WSACleanup WSAGetLastError accept gethostname htonl freeaddrinfo getaddrinfo listen sendto recvfrom select __WSAFDIsSet ioctlsocket WSAWaitForMultipleEvents WSAResetEvent WSAEventSelect WSAEnumNetworkEvents WSACreateEvent WSACloseEvent WSAIoctl WSASetLastError socket setsockopt send recv ntohs htons getsockopt getsockname getpeername connect closesocket bind WSAStartup

bcrypt

BCryptGenRandom

crypt32

CertFreeCertificateChain CertGetCertificateChain CertFreeCertificateChainEngine CertCreateCertificateChainEngine CryptQueryObject CertGetNameStringW CertFindExtension CertAddCertificateContextToStore CryptDecodeObjectEx PFXImportCertStore CryptStringToBinaryW CertFreeCertificateContext CertFindCertificateInStore CertEnumCertificatesInStore CertCloseStore CertOpenStore

advapi32

CryptEncrypt CryptImportKey CryptDestroyKey CryptDestroyHash CryptHashData CryptCreateHash CryptGetHashParam CryptReleaseContext CryptAcquireContextW

kernel32

GetConsoleOutputCP ReadConsoleW GetCommandLineA GetModuleFileNameW ExitProcess FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetDriveTypeW FreeLibraryAndExitThread ExitThread HeapFree HeapAlloc FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID HeapReAlloc EnumSystemLocalesW GetTimeZoneInformation IsValidCodePage GetACP GetOEMCP SetEnvironmentVariableW GetProcessHeap HeapSize SetStdHandle GetConsoleScreenBufferInfo CloseHandle EnterCriticalSection LeaveCriticalSection DeleteCriticalSection WaitForSingleObject WaitForMultipleObjects LocalFree FormatMessageA FormatMessageW WideCharToMultiByte SetConsoleOutputCP GetEnvironmentStrings GetEnvironmentStringsW FreeEnvironmentStringsA FreeEnvironmentStringsW CreateFileA ReadFile WriteFile AreFileApisANSI SetHandleInformation GetLastError CreatePipe TerminateProcess GetExitCodeProcess CreateProcessW GetSystemDirectoryW GetModuleFileNameA MultiByteToWideChar GetCommandLineW GetCurrentDirectoryW CreateDirectoryW CreateFileW DeleteFileW FlushFileBuffers GetFileAttributesW GetFileInformationByHandle GetFinalPathNameByHandleW GetFullPathNameW SetEndOfFile SetFilePointerEx SetFileTime DeviceIoControl GetModuleHandleW GetProcAddress MoveFileExW Sleep GetCurrentProcessId GetCurrentThreadId GetDynamicTimeZoneInformation GetStdHandle GetConsoleMode WriteConsoleA RtlUnwind SetConsoleTextAttribute ReleaseSRWLockExclusive AcquireSRWLockExclusive SleepEx InitializeCriticalSectionEx QueryPerformanceFrequency FreeLibrary LoadLibraryW GetModuleHandleA GetEnvironmentVariableA QueryPerformanceCounter GetTickCount SetLastError GetFileType PeekNamedPipe WaitForSingleObjectEx VerSetConditionMask VerifyVersionInfoW GetFileSizeEx WriteConsoleW CreateThread SetConsoleCtrlHandler LoadLibraryExW TlsFree GetLocaleInfoEx FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW SetFileInformationByHandle GetTempPathW GetFileInformationByHandleEx GetExitCodeThread RtlPcToFileHeader RaiseException InitOnceBeginInitialize InitOnceComplete TryAcquireSRWLockExclusive SleepConditionVariableSRW WakeConditionVariable WakeAllConditionVariable GetStringTypeW FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork GetModuleHandleExW IsProcessorFeaturePresent EncodePointer DecodePointer LCMapStringEx GetSystemTimeAsFileTime CompareStringEx GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsDebuggerPresent GetStartupInfoW InitializeSListHead RtlUnwindEx InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue

shell32

SHGetFileInfoW

Name

.text

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

498KB

Virtual Size

498KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

43KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

73KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

194KB

Virtual Size

194KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rcd7cb

Size

96KB

Virtual Size

96KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-06_04dd0d2940d5e557c1e5467df11c1291_akira_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc

ws2_32

bcrypt

crypt32

advapi32

kernel32

shell32

generic