2026-07-15_49496413ed550acce3c879e60629aee0_blankgrabber_icedid_luca-stealer_njrat

General

Target
2026-07-15_49496413ed550acce3c879e60629aee0_blankgrabber_icedid_luca-stealer_njrat
Size 5.8MB
Sample260716-cdpkgsaz4k
SHA256 d3c303a6e6fd70bae3026e3dfc1ed561e798f6ddb82746533fc18c31e5fc9542
MD5 49496413ed550acce3c879e60629aee0
SHA1 d793a636752c4773ce36f734fa89a694928f373f
SHA512 c5dbe4535bae0f8840418e92d32ee01b77d5ae7f1bee779a892933c83beac0823a60a5a684c176b7a765f578f7d67abde7d8034dce4a60fa6dffe3a1d2b6c9a9
SSDEEP 98304:nlo50BOnQnJbur9AOGCwJ+HOnFZrdpL271+xgxRjDSRLRaI0I5V+a7WyFtfu5W:e50gQJbSNG5J+uF1H2BFRjR/I5V+dyFN
TLSH
T12556335872D04EFCC96B907D5DB4251186BBB8910383D6EF01B492B0EF6B3D51E2EBA1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-15_49496413ed550acce3c879e60629aee0_blankgrabber_icedid_luca-stealer_njrat

File Explorer

2026-07-15_49496413ed550acce3c879e60629aee0_blankgrabber_icedid_luca-stealer_njrat

.exe 5.8MB

2026-07-15_49496413ed550acce3c879e60629aee0_blankgrabber_icedid_luca-stealer_njrat

IMPHASH ce121d54c18544c7a777693886ce492d
SHA256 d3c303a6e6fd70bae3026e3dfc1ed561e798f6ddb82746533fc18c31e5fc9542
MD5 49496413ed550acce3c879e60629aee0
SHA1 d793a636752c4773ce36f734fa89a694928f373f
SHA512 c5dbe4535bae0f8840418e92d32ee01b77d5ae7f1bee779a892933c83beac0823a60a5a684c176b7a765f578f7d67abde7d8034dce4a60fa6dffe3a1d2b6c9a9
SSDEEP 98304:nlo50BOnQnJbur9AOGCwJ+HOnFZrdpL271+xgxRjDSRLRaI0I5V+a7WyFtfu5W:e50gQJbSNG5J+uF1H2BFRjR/I5V+dyFN
TLSH
T12556335872D04EFCC96B907D5DB4251186BBB8910383D6EF01B492B0EF6B3D51E2EBA1
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

51628

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

SHFileOperationW SHGetFolderPathW CommandLineToArgvW

kernel32

RtlUnwindEx WriteConsoleW HeapReAlloc CreateDirectoryW SizeofResource SetConsoleCtrlHandler AddDllDirectory GetCommandLineW GetStdHandle WriteFile GetShortPathNameW TerminateProcess GetModuleFileNameW SetEnvironmentVariableW K32GetModuleFileNameExW GetEnvironmentVariableW GetTempPathW FindResourceA WaitForSingleObject CreateFileW GetFileAttributesW GetModuleHandleA OpenProcess Sleep GetLastError LockResource CloseHandle LoadResource GetProcAddress GetCurrentProcessId CreateProcessW WideCharToMultiByte GetSystemTimeAsFileTime FormatMessageA SetDllDirectoryW LoadLibraryExW GetExitCodeProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW HeapSize SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary EncodePointer RaiseException RtlPcToFileHeader ExitProcess GetModuleHandleExW GetCommandLineA HeapAlloc MultiByteToWideChar HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect CompareStringW LCMapStringW GetFileType GetStringTypeW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx

Name

.text

Size

141KB

Virtual Size

141KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

60KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

163KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

5.6MB

Virtual Size

5.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-15_49496413ed550acce3c879e60629aee0_blankgrabber_icedid_luca-stealer_njrat

shell32

kernel32

generic