General
- Target 2026-07-23_6c4577224e8a04f014d67c65991578df_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 50.1MB
- Sample260723-gmsqqasaka
- SHA256 0b9806305a3534e151b3330a9ae99943a380403abac2388cd431a785d8b1679f
- MD5 6c4577224e8a04f014d67c65991578df
- SHA1 2cf25f6e58aef85c92a06e72a8fa720c45f36a7d
- SHA512 9cf8d8000f1c010371e505f62831979d526ecb318099e7da188ad30b2c019bbc5656cb5e64bcfbcbaf26b5cf4b3e3b0b9e091cf7fdf6320b8d6e2dea36ef402e
- SSDEEP 1572864:7XGMK4XR3b9CHSCU/+UyPlK+t2vx8MGyRYhP1:7gYRSSC++Uy97Q4P
- TLSH T129B73350D9C909C2E8A62D74C0429649DB5178EF977297F691A003D70A5BEE02F3FAFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-07-23_6c4577224e8a04f014d67c65991578df_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_6c4577224e8a04f014d67c65991578df_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_6c4577224e8a04f014d67c65991578df_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 50.1MB
- SHA256 0b9806305a3534e151b3330a9ae99943a380403abac2388cd431a785d8b1679f
- MD5 6c4577224e8a04f014d67c65991578df
- SHA1 2cf25f6e58aef85c92a06e72a8fa720c45f36a7d
- SHA512 9cf8d8000f1c010371e505f62831979d526ecb318099e7da188ad30b2c019bbc5656cb5e64bcfbcbaf26b5cf4b3e3b0b9e091cf7fdf6320b8d6e2dea36ef402e
- SSDEEP 1572864:7XGMK4XR3b9CHSCU/+UyPlK+t2vx8MGyRYhP1:7gYRSSC++Uy97Q4P
- TLSH T129B73350D9C909C2E8A62D74C0429649DB5178EF977297F691A003D70A5BEE02F3FAFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL