General
- Target 2026-07-23_f6ff868bf86eb3bdb7a1beeb904b50e5_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.0MB
- Sample260723-sdk53aep3x
- SHA256 bbf41c8914bf171409b40888b9f517f6363c99b2dffb54f1085ab39c71ef5cbb
- MD5 f6ff868bf86eb3bdb7a1beeb904b50e5
- SHA1 6d1123cf1bc94069dd89761f6e87ada3a9eeeb02
- SHA512 ddda106cb24ca22f5617d39eace8f49dec1543470686444c00c0e7cd8bfea3457a52e9c5f49b533b444efadd1dcf3c841b24dd788dba33745289419717b8c197
- SSDEEP 393216:k5v85vzadluC7hHTodRGkXF741HLNwsssj:15vz5Cl0LhXAHLNw8j
- TLSH T1C7D6336627CC49E5FAF2713D81536019A7B6BC564B21D6DF03E80AD62C773E42E22D32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-07-23_f6ff868bf86eb3bdb7a1beeb904b50e5_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_f6ff868bf86eb3bdb7a1beeb904b50e5_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_f6ff868bf86eb3bdb7a1beeb904b50e5_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.0MB
- SHA256 bbf41c8914bf171409b40888b9f517f6363c99b2dffb54f1085ab39c71ef5cbb
- MD5 f6ff868bf86eb3bdb7a1beeb904b50e5
- SHA1 6d1123cf1bc94069dd89761f6e87ada3a9eeeb02
- SHA512 ddda106cb24ca22f5617d39eace8f49dec1543470686444c00c0e7cd8bfea3457a52e9c5f49b533b444efadd1dcf3c841b24dd788dba33745289419717b8c197
- SSDEEP 393216:k5v85vzadluC7hHTodRGkXF741HLNwsssj:15vz5Cl0LhXAHLNw8j
- TLSH T1C7D6336627CC49E5FAF2713D81536019A7B6BC564B21D6DF03E80AD62C773E42E22D32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application