General
- Target 2026-07-28_219b5d691744d7a98c8b4df067b0b136_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.7MB
- Sample260729-b3f4zaem2w
- SHA256 f4c32b3f9a949e5a17ff0b8ad130ba5ca15e5d9a037c7a97dcc68a6b4c3212f7
- MD5 219b5d691744d7a98c8b4df067b0b136
- SHA1 8587723e626cb2b73b27e79c8828abe8d5bc1996
- SHA512 ea8320c16e1f968320e8905910ebfb1d49ca03d742b3a3b761b5c53639f61f2d33b6aca12183fff2025a46a9938615d9d249ba3dc5b9b8badd2ca1c09c760eea
- SSDEEP 393216:ELZKsRWVOpGJEst1yGXMCHWUjX6cuI3/PGTAI:ErWVOpGuI1TXMb8X3H/O7
- TLSH T140E63348B7E492EEF5B3843CBCA160A5D5A4F8734732C5DB4B6883B2AD172E04939753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-07-28_219b5d691744d7a98c8b4df067b0b136_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_219b5d691744d7a98c8b4df067b0b136_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_219b5d691744d7a98c8b4df067b0b136_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.7MB
- SHA256 f4c32b3f9a949e5a17ff0b8ad130ba5ca15e5d9a037c7a97dcc68a6b4c3212f7
- MD5 219b5d691744d7a98c8b4df067b0b136
- SHA1 8587723e626cb2b73b27e79c8828abe8d5bc1996
- SHA512 ea8320c16e1f968320e8905910ebfb1d49ca03d742b3a3b761b5c53639f61f2d33b6aca12183fff2025a46a9938615d9d249ba3dc5b9b8badd2ca1c09c760eea
- SSDEEP 393216:ELZKsRWVOpGJEst1yGXMCHWUjX6cuI3/PGTAI:ErWVOpGuI1TXMb8X3H/O7
- TLSH T140E63348B7E492EEF5B3843CBCA160A5D5A4F8734732C5DB4B6883B2AD172E04939753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Loads dropped DLL