General
- Target 2026-07-31_0f887952dc5252c713f141b8ff1f8070_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.6MB
- Sample260731-jntqhsythy
- SHA256 0db05388d762bff931351ac2d599ca1d2bb216198754cda6d275b07709c50766
- MD5 0f887952dc5252c713f141b8ff1f8070
- SHA1 c8dbaed4b894e24f5f214de1a9c837baf664cf7d
- SHA512 ac7111766bc867a2932cf813575752ad41b0db5dd6a3b824d3a6c4c5d1e11f015cd69aa49c88967e568b27d8174df4bfddaed93c1f0f444f09b89e3d4fe4b7d9
- SSDEEP 393216:rgdVDNrATnUy4dpnVq7ofmXMCHWUjXGScuI3/PGTAI:rEFATnUFdpnVq7ofmXMb8XEH/O7
- TLSH T175E6332CB9D101EFD5A3417DC8B229D2CDBAB0651B72CAAF4B54D794BE630F08938716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-07-31_0f887952dc5252c713f141b8ff1f8070_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_0f887952dc5252c713f141b8ff1f8070_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_0f887952dc5252c713f141b8ff1f8070_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.6MB
- SHA256 0db05388d762bff931351ac2d599ca1d2bb216198754cda6d275b07709c50766
- MD5 0f887952dc5252c713f141b8ff1f8070
- SHA1 c8dbaed4b894e24f5f214de1a9c837baf664cf7d
- SHA512 ac7111766bc867a2932cf813575752ad41b0db5dd6a3b824d3a6c4c5d1e11f015cd69aa49c88967e568b27d8174df4bfddaed93c1f0f444f09b89e3d4fe4b7d9
- SSDEEP 393216:rgdVDNrATnUy4dpnVq7ofmXMCHWUjXGScuI3/PGTAI:rEFATnUFdpnVq7ofmXMb8XEH/O7
- TLSH T175E6332CB9D101EFD5A3417DC8B229D2CDBAB0651B72CAAF4B54D794BE630F08938716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Loads dropped DLL