General
- Target 2026-07-11_253836ae137c7e2557d46f295370c42d_blankgrabber_icedid_luca-stealer_njrat
- Size 3.9MB
- Sample260711-dpby7sds7s
- SHA256 9e672bd207fed17d0792b7df0f457f77b2e57c631711337b3a9987bb5fde4763
- MD5 253836ae137c7e2557d46f295370c42d
- SHA1 b2c9c9c548eb1b93a09284d3ee35d94c7dfa3a29
- SHA512 04c15910b3db2c83ca38b0c5133cba2518897005694da0ebbc422269f075f9a82ea560943862cabdd2e689fdeac9bddfd2cab4eb21c01fddbda28527b2d13110
- SSDEEP 98304:7ROf7i53JWJShSOlRV7O/2ia+YoeqDtNohbV:78O5BSonOj4GDPQp
- TLSH T111163389B7E614F9C157C634CCA84863D1F3BC2253515BEFAAB1656D0E339D04E3AB82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_253836ae137c7e2557d46f295370c42d_blankgrabber_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_253836ae137c7e2557d46f295370c42d_blankgrabber_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_253836ae137c7e2557d46f295370c42d_blankgrabber_icedid_luca-stealer_njrat
- Size 3.9MB
- SHA256 9e672bd207fed17d0792b7df0f457f77b2e57c631711337b3a9987bb5fde4763
- MD5 253836ae137c7e2557d46f295370c42d
- SHA1 b2c9c9c548eb1b93a09284d3ee35d94c7dfa3a29
- SHA512 04c15910b3db2c83ca38b0c5133cba2518897005694da0ebbc422269f075f9a82ea560943862cabdd2e689fdeac9bddfd2cab4eb21c01fddbda28527b2d13110
- SSDEEP 98304:7ROf7i53JWJShSOlRV7O/2ia+YoeqDtNohbV:78O5BSonOj4GDPQp
- TLSH T111163389B7E614F9C157C634CCA84863D1F3BC2253515BEFAAB1656D0E339D04E3AB82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Windows security bypass
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Download via BitsAdmin
-
Loads dropped DLL