General
- Target 2026-07-29_b18dbb4364eb84c4fcd6e405006d2fc2_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.6MB
- Sample260729-19vclsteme
- SHA256 8a5cd46a4e91474deaeea3fb1277bc993524a547bd09138a15fefa456155d4b6
- MD5 b18dbb4364eb84c4fcd6e405006d2fc2
- SHA1 3e3c72a35aee2040bc517bd90ff3717b68c7cc2b
- SHA512 27392ca32bb038821cce95332ba9446308c9ac348291fd80df8d3cb892ee2a041bd640813e69032e61542ddab4bb4bfe4d7dfbba531207888a855bd8f6d5ccc1
- SSDEEP 393216:0q7JQ2bNddLQtx/vm5GVfzHvi0XMCHWUjXycuI3/PGTAI:0qtjbNddLQLXVflXMb8XPH/O7
- TLSH T180E6338CE6E401BDE2B3523DDDD165F5D17674A603B2C1EB1BA48291BC2B2D18E3DA13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-07-29_b18dbb4364eb84c4fcd6e405006d2fc2_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_b18dbb4364eb84c4fcd6e405006d2fc2_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_b18dbb4364eb84c4fcd6e405006d2fc2_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.6MB
- SHA256 8a5cd46a4e91474deaeea3fb1277bc993524a547bd09138a15fefa456155d4b6
- MD5 b18dbb4364eb84c4fcd6e405006d2fc2
- SHA1 3e3c72a35aee2040bc517bd90ff3717b68c7cc2b
- SHA512 27392ca32bb038821cce95332ba9446308c9ac348291fd80df8d3cb892ee2a041bd640813e69032e61542ddab4bb4bfe4d7dfbba531207888a855bd8f6d5ccc1
- SSDEEP 393216:0q7JQ2bNddLQtx/vm5GVfzHvi0XMCHWUjXycuI3/PGTAI:0qtjbNddLQLXVflXMb8XPH/O7
- TLSH T180E6338CE6E401BDE2B3523DDDD165F5D17674A603B2C1EB1BA48291BC2B2D18E3DA13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Loads dropped DLL