General
- Target 2026-07-14_ab3a5697a67aa5556c7da45c7d2a3fb9_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.6MB
- Sample260715-arcfzagt8m
- SHA256 43434387761e5d26286c10c577077e846f65ea6074c87bbdb6dc8149bff96f2b
- MD5 ab3a5697a67aa5556c7da45c7d2a3fb9
- SHA1 e1845ec8d56b22bb9ce11b71261eb1b848d41c54
- SHA512 7d8c07f0672f47f2afe75c8059f1d6f43fabc8e7be7c808de7f9d13398c4f7fd299840b5680fcb78ff81a9922b0862203af63140d331544ef57410436281ec04
- SSDEEP 393216:VmG2GkkHuF9CoooXzYBzW0btXMCHWUjXRcuI3/PGTAI:VmChOFFbX0btXMb8XGH/O7
- TLSH T133E63308A3D001EDE9A34279AEE257D4E075B4670336C6EF9B64933A1D636F0883775A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-07-14_ab3a5697a67aa5556c7da45c7d2a3fb9_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_ab3a5697a67aa5556c7da45c7d2a3fb9_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_ab3a5697a67aa5556c7da45c7d2a3fb9_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.6MB
- SHA256 43434387761e5d26286c10c577077e846f65ea6074c87bbdb6dc8149bff96f2b
- MD5 ab3a5697a67aa5556c7da45c7d2a3fb9
- SHA1 e1845ec8d56b22bb9ce11b71261eb1b848d41c54
- SHA512 7d8c07f0672f47f2afe75c8059f1d6f43fabc8e7be7c808de7f9d13398c4f7fd299840b5680fcb78ff81a9922b0862203af63140d331544ef57410436281ec04
- SSDEEP 393216:VmG2GkkHuF9CoooXzYBzW0btXMCHWUjXRcuI3/PGTAI:VmChOFFbX0btXMb8XGH/O7
- TLSH T133E63308A3D001EDE9A34279AEE257D4E075B4670336C6EF9B64933A1D636F0883775A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Loads dropped DLL