General
- Target 2026-07-19_ea8df60f76bbdfb016b83a3637908fda_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 7.6MB
- Sample260719-mc95xaby4w
- SHA256 afcf185bc65f3d5eb8dba73e7e7dda0b5548c1c0aa889e85f30edc35bf4837fc
- MD5 ea8df60f76bbdfb016b83a3637908fda
- SHA1 f0530b9e800fb4443f74c7ba4042039a31c64496
- SHA512 c159bb77d9a146f329ffd3845349ade55a68973f2e6ce0f6150a0f15ef0cb1e27c8fad5bc721d4a94f8c5c134f98d40ac101b6e899dca45ede632becab07e48a
- SSDEEP 196608:ve2eayurHQ/uhHToAUPNfGU5vXvcL8dIOZ+:vSu0mhHTodRGkX0YPA
- TLSH T1EE86336AB3D549F5FDBBE53C86130254A37338564721C4EB03D486A23E376E4293AB72
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-19_ea8df60f76bbdfb016b83a3637908fda_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_ea8df60f76bbdfb016b83a3637908fda_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_ea8df60f76bbdfb016b83a3637908fda_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 7.6MB
- SHA256 afcf185bc65f3d5eb8dba73e7e7dda0b5548c1c0aa889e85f30edc35bf4837fc
- MD5 ea8df60f76bbdfb016b83a3637908fda
- SHA1 f0530b9e800fb4443f74c7ba4042039a31c64496
- SHA512 c159bb77d9a146f329ffd3845349ade55a68973f2e6ce0f6150a0f15ef0cb1e27c8fad5bc721d4a94f8c5c134f98d40ac101b6e899dca45ede632becab07e48a
- SSDEEP 196608:ve2eayurHQ/uhHToAUPNfGU5vXvcL8dIOZ+:vSu0mhHTodRGkX0YPA
- TLSH T1EE86336AB3D549F5FDBBE53C86130254A37338564721C4EB03D486A23E376E4293AB72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Uses browser remote debugging
Can be used control the browser and steal sensitive information such as credentials and session cookies.
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Modify Authentication Process
1Steal Web Session Cookie
1Unsecured Credentials
1Credentials In Files
1