General
- Target 2026-07-30_5785ea78b4e7e0528c2c0c3291732d51_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.7MB
- Sample260730-gbsxcace32
- SHA256 054fe387cda25efcaf47ef4e5fc18fbfdc6c52f35715d2adbb22700eb96736be
- MD5 5785ea78b4e7e0528c2c0c3291732d51
- SHA1 438b9abe8850803897999c0ff6a7be7d0b06b135
- SHA512 0f48952ec35b28024c8b42a014b84c78789a8979cb8e63c341021ab1e406b56ad3579f1b78f799802d0178d0d37de614c2e4cf279e2e82e65d33f75b6962b642
- SSDEEP 393216:YogWk9afkYro02nk+DJmNkGjiZyXMCHWUjXDcuI3/PGTAI:Y7WiafkEynANeyXMb8XgH/O7
- TLSH T19FE63304A5E415FFCAF3A13889D106A1E8B87C620F71C5EB575883B2DE773904CB9A5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-07-30_5785ea78b4e7e0528c2c0c3291732d51_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_5785ea78b4e7e0528c2c0c3291732d51_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_5785ea78b4e7e0528c2c0c3291732d51_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.7MB
- SHA256 054fe387cda25efcaf47ef4e5fc18fbfdc6c52f35715d2adbb22700eb96736be
- MD5 5785ea78b4e7e0528c2c0c3291732d51
- SHA1 438b9abe8850803897999c0ff6a7be7d0b06b135
- SHA512 0f48952ec35b28024c8b42a014b84c78789a8979cb8e63c341021ab1e406b56ad3579f1b78f799802d0178d0d37de614c2e4cf279e2e82e65d33f75b6962b642
- SSDEEP 393216:YogWk9afkYro02nk+DJmNkGjiZyXMCHWUjXDcuI3/PGTAI:Y7WiafkEynANeyXMb8XgH/O7
- TLSH T19FE63304A5E415FFCAF3A13889D106A1E8B87C620F71C5EB575883B2DE773904CB9A5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Loads dropped DLL