General
- Target 2026-07-31_aeb4b12d9c4a92c9e8846b8a7bb55b8d_blankgrabber_coinminer_icedid_luca-stealer_njrat
- Size 26.7MB
- Sample260731-k2sk2sygla
- SHA256 8e6655b741cb821f903c767bae8294a0bd7041211ce0075058e96c18af2411d8
- MD5 aeb4b12d9c4a92c9e8846b8a7bb55b8d
- SHA1 c0f1f4109fcac6dee7d02819fac3db6a323f02ae
- SHA512 ffc09d6ee7d426d7260f75bc63dda377c1d233ae020400bbf89297917aece4edaa076905ff80605569f8026c9513c9eaa874e04436c06f2d90928e9e44f99c3d
- SSDEEP 786432:61IcGn3puDetcUpEkgGOykwkCFCsiIoGIcKU:6+cCAetLhbOyPeZtU
- TLSH T1755733DCE1E3053BF94351B8BDC8126AA3A67C750390946723E0139CBF259D8EB77A91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_aeb4b12d9c4a92c9e8846b8a7bb55b8d_blankgrabber_coinminer_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_aeb4b12d9c4a92c9e8846b8a7bb55b8d_blankgrabber_coinminer_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_aeb4b12d9c4a92c9e8846b8a7bb55b8d_blankgrabber_coinminer_icedid_luca-stealer_njrat
- Size 26.7MB
- SHA256 8e6655b741cb821f903c767bae8294a0bd7041211ce0075058e96c18af2411d8
- MD5 aeb4b12d9c4a92c9e8846b8a7bb55b8d
- SHA1 c0f1f4109fcac6dee7d02819fac3db6a323f02ae
- SHA512 ffc09d6ee7d426d7260f75bc63dda377c1d233ae020400bbf89297917aece4edaa076905ff80605569f8026c9513c9eaa874e04436c06f2d90928e9e44f99c3d
- SSDEEP 786432:61IcGn3puDetcUpEkgGOykwkCFCsiIoGIcKU:6+cCAetLhbOyPeZtU
- TLSH T1755733DCE1E3053BF94351B8BDC8126AA3A67C750390946723E0139CBF259D8EB77A91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL