General
- Target 2026-07-07_cbb621367d81e00492cb7edd394257ce_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 6.9MB
- Sample260707-nv79psd16r
- SHA256 598507105e686f4fa31e76f0457220c8aab03e67c4726922fee323df0c603d4d
- MD5 cbb621367d81e00492cb7edd394257ce
- SHA1 50c6d5652c7d02bc6b391b9b0e6768c0b7a7dfa4
- SHA512 49998be8a45ff5ea8a982fdb57889100bf311b26760973d9c04a99c66f5ce03c7e97b1ebb4d5779fed861ad7307c6dc2789a6927dd3808c1161dbef1df2c46e6
- SSDEEP 196608:pHGiE4NnGCxdGjP5Gi2bjKVPy2wESLEQNwuCppAX:pH7EanGCnGjMi2bjRoSLEkwZAX
- TLSH T1B07633A4B5D104E7F9934138CCE396A6E774BD331711DA9F13A284462F23AF2A83D764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-07-07_cbb621367d81e00492cb7edd394257ce_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_cbb621367d81e00492cb7edd394257ce_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260706-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_cbb621367d81e00492cb7edd394257ce_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 6.9MB
- SHA256 598507105e686f4fa31e76f0457220c8aab03e67c4726922fee323df0c603d4d
- MD5 cbb621367d81e00492cb7edd394257ce
- SHA1 50c6d5652c7d02bc6b391b9b0e6768c0b7a7dfa4
- SHA512 49998be8a45ff5ea8a982fdb57889100bf311b26760973d9c04a99c66f5ce03c7e97b1ebb4d5779fed861ad7307c6dc2789a6927dd3808c1161dbef1df2c46e6
- SSDEEP 196608:pHGiE4NnGCxdGjP5Gi2bjKVPy2wESLEQNwuCppAX:pH7EanGCnGjMi2bjRoSLEkwZAX
- TLSH T1B07633A4B5D104E7F9934138CCE396A6E774BD331711DA9F13A284462F23AF2A83D764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.