General
- Target 2026-07-10_fafe831176f0fd7927989aa612af2367_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 12.2MB
- Sample260710-c57kdacs6p
- SHA256 67692c7772da87ca2e9c9cb009e219c578bf4fbd9624000f59dda786fdc696dd
- MD5 fafe831176f0fd7927989aa612af2367
- SHA1 b39a33fd9ecee138e4ac73edd920b5e49e4b63dd
- SHA512 03a60e9f301942b1b50aaa224c35b1877d520610793363352ef88fcc6873165674a6003e778652ec40028fa954f7132f7fdb900ee762c890b3034f2b865a5114
- SSDEEP 393216:G1FeNox/hC/bdXQfM6R4RmhG7fvEHswqMiF:G1dxeYMc3Ptb
- TLSH T135D633C5FB9105A8E46B113D59D44B1AE2E2BC2207A2CACF1BE03F292D772E5DD39711
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-10_fafe831176f0fd7927989aa612af2367_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_fafe831176f0fd7927989aa612af2367_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_fafe831176f0fd7927989aa612af2367_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 12.2MB
- SHA256 67692c7772da87ca2e9c9cb009e219c578bf4fbd9624000f59dda786fdc696dd
- MD5 fafe831176f0fd7927989aa612af2367
- SHA1 b39a33fd9ecee138e4ac73edd920b5e49e4b63dd
- SHA512 03a60e9f301942b1b50aaa224c35b1877d520610793363352ef88fcc6873165674a6003e778652ec40028fa954f7132f7fdb900ee762c890b3034f2b865a5114
- SSDEEP 393216:G1FeNox/hC/bdXQfM6R4RmhG7fvEHswqMiF:G1dxeYMc3Ptb
- TLSH T135D633C5FB9105A8E46B113D59D44B1AE2E2BC2207A2CACF1BE03F292D772E5DD39711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates processes with tasklist