2026-07-20_c6ff0d2ecf17d31c310485a724c7a36e_blankgrabber_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-20_c6ff0d2ecf17d31c310485a724c7a36e_blankgrabber_icedid_luca-stealer_njrat_stealc
Size 2.3MB
Sample260720-c272qsft8x
SHA256 33d687bd88c92292d74cbb5e65970a584cc76e4e71c9d96072f4227a7573cf04
MD5 c6ff0d2ecf17d31c310485a724c7a36e
SHA1 ad160e44a807b176f1723911dd2a9571da0e1d2e
SHA512 e4fa2965d399817ef6808b07b9987cec5e316d8da35745bd2dff610d9363ef4c33a719a2c02894fafc6ee05a801817ff20fa4db9e62b4a1fd1111c57b342acbe
SSDEEP 49152:ZsEpV+s+6CTBbe4BrjuyqE/JHqSn4hOf:0JV
TLSH
T16DB5BF46F2A501F8C57BD138C956A62BF772784903209BDB17E44A692F63BE01BBF311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-20_c6ff0d2ecf17d31c310485a724c7a36e_blankgrabber_icedid_luca-stealer_njrat_stealc

File Explorer

2026-07-20_c6ff0d2ecf17d31c310485a724c7a36e_blankgrabber_icedid_luca-stealer_njrat_stealc

.exe 2.3MB

2026-07-20_c6ff0d2ecf17d31c310485a724c7a36e_blankgrabber_icedid_luca-stealer_njrat_stealc

IMPHASH 5a2de5cc3ae301c583014fde67b7c8e1
SHA256 33d687bd88c92292d74cbb5e65970a584cc76e4e71c9d96072f4227a7573cf04
MD5 c6ff0d2ecf17d31c310485a724c7a36e
SHA1 ad160e44a807b176f1723911dd2a9571da0e1d2e
SHA512 e4fa2965d399817ef6808b07b9987cec5e316d8da35745bd2dff610d9363ef4c33a719a2c02894fafc6ee05a801817ff20fa4db9e62b4a1fd1111c57b342acbe
SSDEEP 49152:ZsEpV+s+6CTBbe4BrjuyqE/JHqSn4hOf:0JV
TLSH
T16DB5BF46F2A501F8C57BD138C956A62BF772784903209BDB17E44A692F63BE01BBF311
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1341312

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

E:\Downloads\Glory (1)\build\Glory.pdb

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

ole32

CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

advapi32

ClearEventLogA AdjustTokenPrivileges OpenProcessToken OpenEventLogA LookupPrivilegeValueA CloseEventLog

kernel32

GlobalAlloc GlobalFree GlobalLock WideCharToMultiByte GlobalUnlock GetModuleHandleA GetLocaleInfoA LoadLibraryA QueryPerformanceFrequency GetProcAddress FreeLibrary QueryPerformanceCounter Sleep GetStdHandle SetConsoleMode GetConsoleMode GetModuleFileNameA SetConsoleTitleA GetCurrentProcess TerminateProcess ExitProcess GetConsoleWindow AllocConsole Module32Next GetProcessId Module32First OpenProcess CreateToolhelp32Snapshot GetLastError Process32NextW Process32FirstW CloseHandle lstrcmpiW K32GetProcessMemoryInfo SetPriorityClass ExpandEnvironmentStringsA GetCommandLineA GetTempPathA CreateFileA GetFileSizeEx ReadFile HeapAlloc HeapReAlloc HeapFree GetProcessHeap MapViewOfFile UnmapViewOfFile MultiByteToWideChar GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc ReadConsoleW SetFilePointerEx GetFileType SetStdHandle GetCommandLineW WriteFile GetModuleFileNameW FreeLibraryAndExitThread ExitThread CreateThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount RtlUnwind SetLastError RtlUnwindEx GetCPInfo GetStringTypeW LCMapStringEx DecodePointer EncodePointer DeleteCriticalSection LeaveCriticalSection EnterCriticalSection EnumSystemLocalesW FlushFileBuffers GetConsoleOutputCP InitializeCriticalSectionEx SetEnvironmentVariableW HeapSize CreateFileMappingA SetEndOfFile FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage WriteConsoleW GetTimeZoneInformation GetModuleHandleExW RaiseException RtlPcToFileHeader RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW IsDebuggerPresent GetStartupInfoW GetModuleHandleW GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead TryAcquireSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockShared GetTickCount64 LocalFree FormatMessageA GetLocaleInfoEx CreateDirectoryW CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW SetFileInformationByHandle AreFileApisANSI GetFileInformationByHandleEx WaitForSingleObjectEx GetExitCodeThread

user32

EmptyClipboard CloseClipboard SetClipboardData GetCursorPos SetCursorPos ReleaseCapture GetClipboardData OpenClipboard EnumWindows IsWindowUnicode GetWindowTextA GetWindowLongA DispatchMessageA GetWindowRect DestroyWindow GetSystemMetrics SetWindowDisplayAffinity MessageBoxA DefWindowProcA CreateWindowExA SetLayeredWindowAttributes TranslateMessage PeekMessageA PostQuitMessage RegisterClassExA UpdateWindow SetWindowPos ShowWindow SetWindowLongA GetWindowThreadProcessId IsWindow FindWindowA GetKeyNameTextA GetAsyncKeyState MapVirtualKeyA SendInput GetKeyState GetMessageExtraInfo LoadCursorA ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow SetCapture SetCursor GetClientRect

shell32

ShellExecuteW SHGetFolderPathA

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmSetCandidateWindow

dwmapi

DwmExtendFrameIntoClientArea

winhttp

WinHttpSetOption WinHttpOpenRequest WinHttpConnect WinHttpQueryHeaders WinHttpAddRequestHeaders WinHttpOpen WinHttpReceiveResponse WinHttpCloseHandle WinHttpQueryDataAvailable WinHttpReadData WinHttpSendRequest

Name

.text

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

727KB

Virtual Size

727KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

19KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

69KB

Virtual Size

69KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

488B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-20_c6ff0d2ecf17d31c310485a724c7a36e_blankgrabber_icedid_luca-stealer_njrat_stealc

d3d11

d3dcompiler_47

ole32

version

advapi32

kernel32

user32

shell32

imm32

dwmapi

winhttp

generic