General
- Target 2026-07-28_ba1a44c6bfd17c461d2ebf0f033bae12_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.6MB
- Sample260729-atfamsdk6t
- SHA256 04ef9757c950005f926458dee36517a6c879d39e5798a378bdd6aa7a45d0d23a
- MD5 ba1a44c6bfd17c461d2ebf0f033bae12
- SHA1 22edef81c1fe81db499b3084b3c128b96a70c5a1
- SHA512 ab55836620447e39b3da6162669602d2ac180b1c6afa28f268f399e08f262ac38b7ac4d4f115577cc3bdb119d14fb22fb0b4c3493aec7581e41541e946e09749
- SSDEEP 393216:B+cI5DSiUihxiXB9tXMCHWUjX+cuI3/PGTAI:BNI5glX/tXMb8XzH/O7
- TLSH T123E6330827F122DEF6B3503DFED20516E5A9703A2B72C9EB9B5453716F471E18E3A242
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-07-28_ba1a44c6bfd17c461d2ebf0f033bae12_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_ba1a44c6bfd17c461d2ebf0f033bae12_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_ba1a44c6bfd17c461d2ebf0f033bae12_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.6MB
- SHA256 04ef9757c950005f926458dee36517a6c879d39e5798a378bdd6aa7a45d0d23a
- MD5 ba1a44c6bfd17c461d2ebf0f033bae12
- SHA1 22edef81c1fe81db499b3084b3c128b96a70c5a1
- SHA512 ab55836620447e39b3da6162669602d2ac180b1c6afa28f268f399e08f262ac38b7ac4d4f115577cc3bdb119d14fb22fb0b4c3493aec7581e41541e946e09749
- SSDEEP 393216:B+cI5DSiUihxiXB9tXMCHWUjX+cuI3/PGTAI:BNI5glX/tXMb8XzH/O7
- TLSH T123E6330827F122DEF6B3503DFED20516E5A9703A2B72C9EB9B5453716F471E18E3A242
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Loads dropped DLL