General
- Target 2026-08-01_c6853278d3667c4a44c8979e2c66f797_amadey_blankgrabber_coinminer_glassworm_icedid_lost-door_luca-stealer_njrat_stealc_vidar
- Size 7.0MB
- Sample260801-mk5v6axycs
- SHA256 9f31e75e95af940530e7dbbe21dc33399279d0367c70b10e9e162f03fbbe0c0f
- MD5 c6853278d3667c4a44c8979e2c66f797
- SHA1 ae257112a23b722fea6231515a44a8b391d5ae43
- SHA512 014c97b6fe8e4881b08462e07a47b8919156f75a1491d0d656bd7d10578b8e1226f0fa19fd1c7e985b48d6435f4c7dd34dbcf82bde47dbeaf1692a431851e859
- SSDEEP 98304:nPxxnjPSKMJtXQFVOJ7hNJtQ5KQItojGatD527BWG:ZxjIJtXqMJ7PJtQ5rItEVQBWG
- TLSH T15D768D5BA3A401ECE4A7D138CA569613D7B2BC1113719BCF16E06A6B1F73AE05E3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_c6853278d3667c4a44c8979e2c66f797_amadey_blankgrabber_coinminer_glassworm_icedid_lost-door.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_c6853278d3667c4a44c8979e2c66f797_amadey_blankgrabber_coinminer_glassworm_icedid_lost-door.exe
Resource
win11ltsc2024-20260709-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_c6853278d3667c4a44c8979e2c66f797_amadey_blankgrabber_coinminer_glassworm_icedid_lost-door_luca-stealer_njrat_stealc_vidar
- Size 7.0MB
- SHA256 9f31e75e95af940530e7dbbe21dc33399279d0367c70b10e9e162f03fbbe0c0f
- MD5 c6853278d3667c4a44c8979e2c66f797
- SHA1 ae257112a23b722fea6231515a44a8b391d5ae43
- SHA512 014c97b6fe8e4881b08462e07a47b8919156f75a1491d0d656bd7d10578b8e1226f0fa19fd1c7e985b48d6435f4c7dd34dbcf82bde47dbeaf1692a431851e859
- SSDEEP 98304:nPxxnjPSKMJtXQFVOJ7hNJtQ5KQItojGatD527BWG:ZxjIJtXqMJ7PJtQ5rItEVQBWG
- TLSH T15D768D5BA3A401ECE4A7D138CA569613D7B2BC1113719BCF16E06A6B1F73AE05E3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory