General
- Target 2026-07-14_e22497172f8d4c6b9a465fdee1cd1c94_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.6MB
- Sample260715-afhtlsfx5l
- SHA256 862e54dc3f126e9bdc1c1be9c2abf1cea7348c39d22044b20bab193e74871e8e
- MD5 e22497172f8d4c6b9a465fdee1cd1c94
- SHA1 5f9b041f77fb0af092e1e5a567cb3882e843fa64
- SHA512 e82e5094aa828eeb3a238c75a2766e76bffd568263bfa321ab2faf219b678a36fd37679e7a0d7da06627c58be9d0ca946b71ea4b88824423fc7af0e64ba1f71f
- SSDEEP 393216:+gFuUcpFB8gEHiZ3PjMAUWqZOkWPyIXMCHWUjXqcuI3/PGTAI:+g1EFiM3PZqZayIXMb8XHH/O7
- TLSH T191E633999AD102FDE8B3803CFE916A44E0B974660BB2CEDB0AB443556D532918F3D377
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-07-14_e22497172f8d4c6b9a465fdee1cd1c94_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_e22497172f8d4c6b9a465fdee1cd1c94_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_e22497172f8d4c6b9a465fdee1cd1c94_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.6MB
- SHA256 862e54dc3f126e9bdc1c1be9c2abf1cea7348c39d22044b20bab193e74871e8e
- MD5 e22497172f8d4c6b9a465fdee1cd1c94
- SHA1 5f9b041f77fb0af092e1e5a567cb3882e843fa64
- SHA512 e82e5094aa828eeb3a238c75a2766e76bffd568263bfa321ab2faf219b678a36fd37679e7a0d7da06627c58be9d0ca946b71ea4b88824423fc7af0e64ba1f71f
- SSDEEP 393216:+gFuUcpFB8gEHiZ3PjMAUWqZOkWPyIXMCHWUjXqcuI3/PGTAI:+g1EFiM3PZqZayIXMb8XHH/O7
- TLSH T191E633999AD102FDE8B3803CFE916A44E0B974660BB2CEDB0AB443556D532918F3D377
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Loads dropped DLL