General
- Target 2026-07-28_1f6b1d72c0ce7791411926925d4f6f1c_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.6MB
- Sample260729-b3922ssaka
- SHA256 90a7dc10998cbc29704868b8dfe1e69a6f01a08032784f9506988d9558f63ca0
- MD5 1f6b1d72c0ce7791411926925d4f6f1c
- SHA1 c00fbc1f9ffa18934b889c1a06e917d6dd914107
- SHA512 7ed04476b7d9ac3a5fd21e29bf4885ce7dc23a13fa2d9b79b6c2c4b22659642f71d11e23d1f7547eb69336f6db41ba3cab53aecc8e8cd094a2bf716e1676d92c
- SSDEEP 393216:D894Ol6yiPWoZaaUFC8XMCHWUjXkcuI3/PGTAI:DoNKpoXC8XMb8XxH/O7
- TLSH T1D4E6331495F053BFE1B3913CEEE31548D6AAB0BA4BB1C48F6A6847A12D171F08D39763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-07-28_1f6b1d72c0ce7791411926925d4f6f1c_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_1f6b1d72c0ce7791411926925d4f6f1c_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_1f6b1d72c0ce7791411926925d4f6f1c_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.6MB
- SHA256 90a7dc10998cbc29704868b8dfe1e69a6f01a08032784f9506988d9558f63ca0
- MD5 1f6b1d72c0ce7791411926925d4f6f1c
- SHA1 c00fbc1f9ffa18934b889c1a06e917d6dd914107
- SHA512 7ed04476b7d9ac3a5fd21e29bf4885ce7dc23a13fa2d9b79b6c2c4b22659642f71d11e23d1f7547eb69336f6db41ba3cab53aecc8e8cd094a2bf716e1676d92c
- SSDEEP 393216:D894Ol6yiPWoZaaUFC8XMCHWUjXkcuI3/PGTAI:DoNKpoXC8XMb8XxH/O7
- TLSH T1D4E6331495F053BFE1B3913CEEE31548D6AAB0BA4BB1C48F6A6847A12D171F08D39763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Loads dropped DLL