General
- Target 2026-07-13_3fc0e74e8c3216a4b7dc30d7c65d91ac_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.7MB
- Sample260713-2nynksh18q
- SHA256 52a961e6e33da2febb2efad5c66b07ca4b3c322da9e04a39d8e86239d4fd81b8
- MD5 3fc0e74e8c3216a4b7dc30d7c65d91ac
- SHA1 6d360baf43aa810fe0b24967f48e99397e3b88ca
- SHA512 1ca73d00400a111e004bd0640eb50c97fbeb8de30d33d38916b1a3199b7a7aad64d6e1eea0d9a0154f03ee9d5d020604574b181ddadece0c41cfa1188e1298a0
- SSDEEP 393216:kJrS3VmPDTAjfmSXMCHWUjXxcuI3/PGTAI:kw3VkDTAr1XMb8XmH/O7
- TLSH T1CFE6330CA7D016EEEAB3107DEED546A3F591B4764F31C5EB979892969E0B0D0CC39B02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-07-13_3fc0e74e8c3216a4b7dc30d7c65d91ac_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_3fc0e74e8c3216a4b7dc30d7c65d91ac_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_3fc0e74e8c3216a4b7dc30d7c65d91ac_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.7MB
- SHA256 52a961e6e33da2febb2efad5c66b07ca4b3c322da9e04a39d8e86239d4fd81b8
- MD5 3fc0e74e8c3216a4b7dc30d7c65d91ac
- SHA1 6d360baf43aa810fe0b24967f48e99397e3b88ca
- SHA512 1ca73d00400a111e004bd0640eb50c97fbeb8de30d33d38916b1a3199b7a7aad64d6e1eea0d9a0154f03ee9d5d020604574b181ddadece0c41cfa1188e1298a0
- SSDEEP 393216:kJrS3VmPDTAjfmSXMCHWUjXxcuI3/PGTAI:kw3VkDTAr1XMb8XmH/O7
- TLSH T1CFE6330CA7D016EEEAB3107DEED546A3F591B4764F31C5EB979892969E0B0D0CC39B02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Loads dropped DLL