2026-07-06_6bc8f28954598fa4b68a35c7247856aa_blankgrabber_glassworm_hijackloader_icedid_luca-stealer_njrat_vidar

General

Target
2026-07-06_6bc8f28954598fa4b68a35c7247856aa_blankgrabber_glassworm_hijackloader_icedid_luca-stealer_njrat_vidar
Size 12.2MB
Sample260707-dprpnady3m
SHA256 8eef2d4ffb737856e5bac540b8696eef30fc3bb471f73443b6770912236a3d64
MD5 6bc8f28954598fa4b68a35c7247856aa
SHA1 af1616aca3a2ae1b9c6c8f195212ac4938c79f3d
SHA512 63e0fc5a9058f0cbef0fc36b8cf30522897870c986e5992648e4b1c817e9d70160c490cca9aa8dfba1e3b38bc67d75b1aac4e37534b351d0d9d4700de3dd4ac3
SSDEEP 98304:wIlb7WDSprfbHcuZeAV8u0+8NyoHc5esgreBltVe1EsJ5CrSQHyMAwdp09OYSbma:wIl3WDSVes4eBltVW3JOAC0988u
TLSH
T141D67C8176518476F8A6F276C51B060AF370ECB16710CB07315DF2AA2F777A22DA66CC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-06_6bc8f28954598fa4b68a35c7247856aa_blankgrabber_glassworm_hijackloader_icedid_luca-stealer_njrat_vidar

File Explorer

2026-07-06_6bc8f28954598fa4b68a35c7247856aa_blankgrabber_glassworm_hijackloader_icedid_luca-stealer_njrat_vidar

.exe 12.2MB

2026-07-06_6bc8f28954598fa4b68a35c7247856aa_blankgrabber_glassworm_hijackloader_icedid_luca-stealer_njrat_vidar

SHA256 8eef2d4ffb737856e5bac540b8696eef30fc3bb471f73443b6770912236a3d64
MD5 6bc8f28954598fa4b68a35c7247856aa
SHA1 af1616aca3a2ae1b9c6c8f195212ac4938c79f3d
SHA512 63e0fc5a9058f0cbef0fc36b8cf30522897870c986e5992648e4b1c817e9d70160c490cca9aa8dfba1e3b38bc67d75b1aac4e37534b351d0d9d4700de3dd4ac3
SSDEEP 98304:wIlb7WDSprfbHcuZeAV8u0+8NyoHc5esgreBltVe1EsJ5CrSQHyMAwdp09OYSbma:wIl3WDSVes4eBltVW3JOAC0988u
TLSH
T141D67C8176518476F8A6F276C51B060AF370ECB16710CB07315DF2AA2F777A22DA66CC
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

14884

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

103KB

Virtual Size

103KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

12.1MB

Virtual Size

12.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

169KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-06_6bc8f28954598fa4b68a35c7247856aa_blankgrabber_glassworm_hijackloader_icedid_luca-stealer_njrat_vidar

generic