General
- Target 2026-07-17_586abb2ebe5c247d67c866d0b9d7f1cc_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.7MB
- Sample260718-ecby4sft4q
- SHA256 702dedea1d0779b4edde508cbd481e2045869ae9757be69291e87fc7ecfc1414
- MD5 586abb2ebe5c247d67c866d0b9d7f1cc
- SHA1 0e8e108b701e0d4ebaa7491a4c6a0887de0d52a0
- SHA512 a652cea7b4bd401acb72744e1dea170bb22071fc8a7d94fd46dfc78ccd332bc4c8dae1812df86efdba96a5a1c6ea30c6fecf6522384b140d61719c34df3fe99a
- SSDEEP 393216:+IOZX0s5GHYKdXuwyhG89BvXMCHWUjXZcuI3/PGTAI:+j0/4sVKG89BvXMb8XuH/O7
- TLSH T184E6335CA6E011FEE273423DBA900590E6AA78B447B2CF9F574443B96D272D08D3DB27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-07-17_586abb2ebe5c247d67c866d0b9d7f1cc_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_586abb2ebe5c247d67c866d0b9d7f1cc_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_586abb2ebe5c247d67c866d0b9d7f1cc_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.7MB
- SHA256 702dedea1d0779b4edde508cbd481e2045869ae9757be69291e87fc7ecfc1414
- MD5 586abb2ebe5c247d67c866d0b9d7f1cc
- SHA1 0e8e108b701e0d4ebaa7491a4c6a0887de0d52a0
- SHA512 a652cea7b4bd401acb72744e1dea170bb22071fc8a7d94fd46dfc78ccd332bc4c8dae1812df86efdba96a5a1c6ea30c6fecf6522384b140d61719c34df3fe99a
- SSDEEP 393216:+IOZX0s5GHYKdXuwyhG89BvXMCHWUjXZcuI3/PGTAI:+j0/4sVKG89BvXMb8XuH/O7
- TLSH T184E6335CA6E011FEE273423DBA900590E6AA78B447B2CF9F574443B96D272D08D3DB27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Loads dropped DLL