Analysis
- max time kernel
148s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
14/07/2026, 08:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_e5023462c9b1975f8bbd885f72f1c73f_blankgrabber_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_e5023462c9b1975f8bbd885f72f1c73f_blankgrabber_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 2026-07-14_e5023462c9b1975f8bbd885f72f1c73f_blankgrabber_icedid_luca-stealer_njrat_stealc.exe
- Size 4.3MB
- Sample260714-j9xpasht2j
- SHA256 6f2ec09b5eddb69ff3816a1c3671c275dd1ed6d8a9959a4b887a10f7afe5c597
- MD5 e5023462c9b1975f8bbd885f72f1c73f
- SHA1 b806c5b813e00f5c5bd9fed2545ef9ea1c5f1c6d
- SHA512 76e63deb4e5f2d526fc642c589292173cd6b88bf3833a7620d7eb003ea47f81f608e51636607b184c46c52a7417a101567a0fafc88e80b021b87504917518689
- SSDEEP 98304:EE+d7CgCt/ejy+GDIORoT7gRim3er7daH8U+swGFgHwntfbi:EEGykDwofSj4xacYPG82
- TLSH T135261209E6DB02F9CCA7C5BDCA964403D7B2B8460374D6EB02D1A7560FE76E09E3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 4272 2026-07-14_e5023462c9b1975f8bbd885f72f1c73f_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 4272 2026-07-14_e5023462c9b1975f8bbd885f72f1c73f_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 4272 2026-07-14_e5023462c9b1975f8bbd885f72f1c73f_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 4272 2026-07-14_e5023462c9b1975f8bbd885f72f1c73f_blankgrabber_icedid_luca-stealer_njrat_stealc.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4272 2026-07-14_e5023462c9b1975f8bbd885f72f1c73f_blankgrabber_icedid_luca-stealer_njrat_stealc.exe 4272 2026-07-14_e5023462c9b1975f8bbd885f72f1c73f_blankgrabber_icedid_luca-stealer_njrat_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-14_e5023462c9b1975f8bbd885f72f1c73f_blankgrabber_icedid_luca-stealer_njrat_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-14_e5023462c9b1975f8bbd885f72f1c73f_blankgrabber_icedid_luca-stealer_njrat_stealc.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4272