General
- Target 2026-07-20_5f86a208a378bd4ed1cd00dab50b4164_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 29.7MB
- Sample260720-en52bsew5j
- SHA256 99abe2e219c62155f60a49e791a13372dfe9af6bd0c3bc88335136403aceb7f0
- MD5 5f86a208a378bd4ed1cd00dab50b4164
- SHA1 e08a0a395eefaf4df963f7a78ae040e1093b8849
- SHA512 fe6aed52771a72026adfc5a2e90634b0ada523805354ad60ab64d296fc51e42eb2293708990576ea805ee650b3d45902e9f6a1d6438547661656aa9d84c8d60c
- SSDEEP 786432:uq82G4TLcNOiVj858KPwrYtZq5l3AOduPwt7e7yW3Pc:uqrTIAiVEdorYDq52OdywNtW3P
- TLSH T1AE6733467FC60852F897623C75E28A53A2E272751F60CAFE17F212552EB32C4883D779
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-20_5f86a208a378bd4ed1cd00dab50b4164_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_5f86a208a378bd4ed1cd00dab50b4164_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_5f86a208a378bd4ed1cd00dab50b4164_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 29.7MB
- SHA256 99abe2e219c62155f60a49e791a13372dfe9af6bd0c3bc88335136403aceb7f0
- MD5 5f86a208a378bd4ed1cd00dab50b4164
- SHA1 e08a0a395eefaf4df963f7a78ae040e1093b8849
- SHA512 fe6aed52771a72026adfc5a2e90634b0ada523805354ad60ab64d296fc51e42eb2293708990576ea805ee650b3d45902e9f6a1d6438547661656aa9d84c8d60c
- SSDEEP 786432:uq82G4TLcNOiVj858KPwrYtZq5l3AOduPwt7e7yW3Pc:uqrTIAiVEdorYDq52OdywNtW3P
- TLSH T1AE6733467FC60852F897623C75E28A53A2E272751F60CAFE17F212552EB32C4883D779
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Modifies boot configuration data using bcdedit
-
Disables use of System Restore points
-
Loads dropped DLL
-
Drops file in System32 directory