General
- Target 2026-07-15_bb4c905374d5e8c5506c6b6eb9859328_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.7MB
- Sample260715-qbw4fac12p
- SHA256 d1f43c0c7c2179f53a9eb0c8800ee2507375c3aa4dae4966e08c37472f254e5f
- MD5 bb4c905374d5e8c5506c6b6eb9859328
- SHA1 4ceae2a8c8f583c9ad9c96da3a218c2a2b03ba99
- SHA512 c4c460a7a91ddb72b3de742503855efeedc5b5210637e11126be26c92df5f0d9a313caf365f1663e0a2a661c8dd0229e2bfa77620693d91356e4695a7fcc2976
- SSDEEP 393216:ffZiWH8hg4XcD6oGbD3H6ca2XXMCHWUjXbcuI3/PGTAI:ffZzqgwi6ROcXXXMb8XYH/O7
- TLSH T1F9E6335CA5F001BED6A7103CDCE215A9E6F470620731CFDB6BA843966D172E14E7E60B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-07-15_bb4c905374d5e8c5506c6b6eb9859328_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_bb4c905374d5e8c5506c6b6eb9859328_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_bb4c905374d5e8c5506c6b6eb9859328_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.7MB
- SHA256 d1f43c0c7c2179f53a9eb0c8800ee2507375c3aa4dae4966e08c37472f254e5f
- MD5 bb4c905374d5e8c5506c6b6eb9859328
- SHA1 4ceae2a8c8f583c9ad9c96da3a218c2a2b03ba99
- SHA512 c4c460a7a91ddb72b3de742503855efeedc5b5210637e11126be26c92df5f0d9a313caf365f1663e0a2a661c8dd0229e2bfa77620693d91356e4695a7fcc2976
- SSDEEP 393216:ffZiWH8hg4XcD6oGbD3H6ca2XXMCHWUjXbcuI3/PGTAI:ffZzqgwi6ROcXXXMb8XYH/O7
- TLSH T1F9E6335CA5F001BED6A7103CDCE215A9E6F470620731CFDB6BA843966D172E14E7E60B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Loads dropped DLL