General
- Target 2026-07-22_c5f22d73858f05529aa1cd2818bd9e2f_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.6MB
- Sample260722-3anrwssvds
- SHA256 2bcb3d9f4ac0f874aa3bbe4306027f3695006b5087f2c5ad6d01c321dc4fdd00
- MD5 c5f22d73858f05529aa1cd2818bd9e2f
- SHA1 48d67c6148914c0bc853a3c3a87631ae3fd68b32
- SHA512 122cd2773dea4ff099e725f5438047f45fe5beffd266c6692caf02602d8c7a149af34eb4989e51e9e6dc1be45a15d8c7f820283c4652dfafa7fb7af776e095b6
- SSDEEP 393216:uCI5BcSmXCYxSctWPUWYbXMCHWUjXzcuI3/PGTAI:uCqB9mSYpUwXMb8XwH/O7
- TLSH T104E63358AAD021FEE5739138DEF209A6E0B4B05507B2C5D75B6847E4AE172F24C3EB13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-07-22_c5f22d73858f05529aa1cd2818bd9e2f_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_c5f22d73858f05529aa1cd2818bd9e2f_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_c5f22d73858f05529aa1cd2818bd9e2f_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.6MB
- SHA256 2bcb3d9f4ac0f874aa3bbe4306027f3695006b5087f2c5ad6d01c321dc4fdd00
- MD5 c5f22d73858f05529aa1cd2818bd9e2f
- SHA1 48d67c6148914c0bc853a3c3a87631ae3fd68b32
- SHA512 122cd2773dea4ff099e725f5438047f45fe5beffd266c6692caf02602d8c7a149af34eb4989e51e9e6dc1be45a15d8c7f820283c4652dfafa7fb7af776e095b6
- SSDEEP 393216:uCI5BcSmXCYxSctWPUWYbXMCHWUjXzcuI3/PGTAI:uCqB9mSYpUwXMb8XwH/O7
- TLSH T104E63358AAD021FEE5739138DEF209A6E0B4B05507B2C5D75B6847E4AE172F24C3EB13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Loads dropped DLL