General
- Target 2026-07-06_b350bebf451baeb924203188fdec31c6_blankgrabber_coinminer_icedid_luca-stealer_njrat
- Size 9.9MB
- Sample260707-bv4kasct5q
- SHA256 4350ca5125869910db56b8a63de97fa3c443126712a210cb68c28b9a484256c1
- MD5 b350bebf451baeb924203188fdec31c6
- SHA1 3d512cdb73d479e54ba485122b9d7c3fd91183c0
- SHA512 9b2b71a0ad46fef8756f8f26ece32fd963ec3e865d6548e6e1cc82dc65ab40db83c863ac7aff1209039b5e5763e0ae15b9d1409a761feaebeb6c3bda873e32b3
- SSDEEP 196608:JszUVgVOY5AUZIKW9iZbf17lTGEAfA0AFtkQ9d/qZ/f2j4yxxmd8S6dVk:WzUkIv0Zbf15VcAZZ9CJCmdGdK
- TLSH T1C0B6331535B201F4D02F89B4CC668A9B97FA799287969EEB03C5E13F1E178F09E34B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_b350bebf451baeb924203188fdec31c6_blankgrabber_coinminer_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_b350bebf451baeb924203188fdec31c6_blankgrabber_coinminer_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260706-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_b350bebf451baeb924203188fdec31c6_blankgrabber_coinminer_icedid_luca-stealer_njrat
- Size 9.9MB
- SHA256 4350ca5125869910db56b8a63de97fa3c443126712a210cb68c28b9a484256c1
- MD5 b350bebf451baeb924203188fdec31c6
- SHA1 3d512cdb73d479e54ba485122b9d7c3fd91183c0
- SHA512 9b2b71a0ad46fef8756f8f26ece32fd963ec3e865d6548e6e1cc82dc65ab40db83c863ac7aff1209039b5e5763e0ae15b9d1409a761feaebeb6c3bda873e32b3
- SSDEEP 196608:JszUVgVOY5AUZIKW9iZbf17lTGEAfA0AFtkQ9d/qZ/f2j4yxxmd8S6dVk:WzUkIv0Zbf15VcAZZ9CJCmdGdK
- TLSH T1C0B6331535B201F4D02F89B4CC668A9B97FA799287969EEB03C5E13F1E178F09E34B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Loads dropped DLL
-
Enumerates processes with tasklist