General
- Target 2026-07-29_63af6f263d25e1a852bf01328b9e004a_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 18.0MB
- Sample260729-ph6e1sgd94
- SHA256 b73949b3c758ed5cccc95b3d936f313f74e3bdfff80e9ac711dea52947a598a9
- MD5 63af6f263d25e1a852bf01328b9e004a
- SHA1 2b0e404cb777604e7f5bbbd4aefe56cfe895b2b7
- SHA512 8d8db412331a3685d2a87f6588475cc924d19ab040808484696c3c400e1d5b5c4bc8b434cd24a4968b48d5a4044bae66c1355822985ff33cadf521419505c1f7
- SSDEEP 393216:hxwsFl7dCR1C99OIZCvSwlQbZklOIl2CL2Vmd6m8NjMGUv9At76tKkCeyW:h9FlUR1OOIZKSCQQXyVmduNwTK76ckCf
- TLSH T1F61733A467A014A7E6F12D3E806AA355887574066F81D1CF8BB8D3142F27FF0AC79F52
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-29_63af6f263d25e1a852bf01328b9e004a_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_63af6f263d25e1a852bf01328b9e004a_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_63af6f263d25e1a852bf01328b9e004a_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 18.0MB
- SHA256 b73949b3c758ed5cccc95b3d936f313f74e3bdfff80e9ac711dea52947a598a9
- MD5 63af6f263d25e1a852bf01328b9e004a
- SHA1 2b0e404cb777604e7f5bbbd4aefe56cfe895b2b7
- SHA512 8d8db412331a3685d2a87f6588475cc924d19ab040808484696c3c400e1d5b5c4bc8b434cd24a4968b48d5a4044bae66c1355822985ff33cadf521419505c1f7
- SSDEEP 393216:hxwsFl7dCR1C99OIZCvSwlQbZklOIl2CL2Vmd6m8NjMGUv9At76tKkCeyW:h9FlUR1OOIZKSCQQXyVmduNwTK76ckCf
- TLSH T1F61733A467A014A7E6F12D3E806AA355887574066F81D1CF8BB8D3142F27FF0AC79F52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting