General
- Target 2026-07-08_f88760a051977f2c8e8082eea2d30fa9_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 42.1MB
- Sample260708-cf9cnshs8v
- SHA256 b1230735fc268b33fc6b10c9b4a87b0676860d22dd923adbb45e8457278a05e0
- MD5 f88760a051977f2c8e8082eea2d30fa9
- SHA1 0d828a5dfae52acefa28ae36b99ac9baca556c49
- SHA512 91079cba87da0123c1615a3fbc99458a0efafb1ae939d2fe32d2f3a0d56d3d765086ddd2584215451f5473f303499ee03062b4c7d98f65ed7d7f9c9933c31173
- SSDEEP 786432:eOOoILVQbOglVHNOjvmLIdRN6pSKZg9LBo3B9E5WM9jHT58KPwrYtZq5DzSK7ee:eXJVrvo2pUg9NoX0RHddorYDq5DOg5
- TLSH T153A733A0A99441F1E8D3423D47B68516B4F2A470A7278AFF42E5525F3E87353083DAFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Behavioral task
behavioral1
Sample
2026-07-08_f88760a051977f2c8e8082eea2d30fa9_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_f88760a051977f2c8e8082eea2d30fa9_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260706-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_f88760a051977f2c8e8082eea2d30fa9_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 42.1MB
- SHA256 b1230735fc268b33fc6b10c9b4a87b0676860d22dd923adbb45e8457278a05e0
- MD5 f88760a051977f2c8e8082eea2d30fa9
- SHA1 0d828a5dfae52acefa28ae36b99ac9baca556c49
- SHA512 91079cba87da0123c1615a3fbc99458a0efafb1ae939d2fe32d2f3a0d56d3d765086ddd2584215451f5473f303499ee03062b4c7d98f65ed7d7f9c9933c31173
- SSDEEP 786432:eOOoILVQbOglVHNOjvmLIdRN6pSKZg9LBo3B9E5WM9jHT58KPwrYtZq5DzSK7ee:eXJVrvo2pUg9NoX0RHddorYDq5DOg5
- TLSH T153A733A0A99441F1E8D3423D47B68516B4F2A470A7278AFF42E5525F3E87353083DAFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Disables Task Manager via registry modification
-
Looks for VMWare services registry key.
-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger