General
- Target 2026-07-07_765f552c4888ae9c4c6c12b6e7b1f5a0_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.6MB
- Sample260707-th1a8ahs31
- SHA256 e5f6c4d827a3dd8ce5aa80fa8e2cbb5b9892d12ef1c8ff379bafaee383799bfc
- MD5 765f552c4888ae9c4c6c12b6e7b1f5a0
- SHA1 a3f93f4e53a06c13fc60eb1d35c9148e38520879
- SHA512 7c2218a95d1d2115689db02e024984ae2a9f3ffb7c539efc0e45d0257616a1e15c4e3bc9fbda1dd066867406650cbdbc312f0071d3f0f59f672e45fec70d30b0
- SSDEEP 393216:JJbuALbAly1zCb3kJVzAmXMCHWUjXzcuI3/PGTAI:JNuw28cmXMb8XwH/O7
- TLSH T128E6338CA9E012EEF973423CAED1A255E455707A1731C9DB07B487F16E472A08E3D727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-07-07_765f552c4888ae9c4c6c12b6e7b1f5a0_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_765f552c4888ae9c4c6c12b6e7b1f5a0_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260706-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_765f552c4888ae9c4c6c12b6e7b1f5a0_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.6MB
- SHA256 e5f6c4d827a3dd8ce5aa80fa8e2cbb5b9892d12ef1c8ff379bafaee383799bfc
- MD5 765f552c4888ae9c4c6c12b6e7b1f5a0
- SHA1 a3f93f4e53a06c13fc60eb1d35c9148e38520879
- SHA512 7c2218a95d1d2115689db02e024984ae2a9f3ffb7c539efc0e45d0257616a1e15c4e3bc9fbda1dd066867406650cbdbc312f0071d3f0f59f672e45fec70d30b0
- SSDEEP 393216:JJbuALbAly1zCb3kJVzAmXMCHWUjXzcuI3/PGTAI:JNuw28cmXMb8XwH/O7
- TLSH T128E6338CA9E012EEF973423CAED1A255E455707A1731C9DB07B487F16E472A08E3D727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Loads dropped DLL