General
- Target 2026-08-01_412bf948c841cf5a9bfc8380afa91cd5_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.7MB
- Sample260801-rawxqabe79
- SHA256 f7a5a8053c29252ae6d1e898a93b4f73363768a23a5b779952fc71a1ca3f2e44
- MD5 412bf948c841cf5a9bfc8380afa91cd5
- SHA1 f792f223f9b0e7e37c010ae4ab823a94dfb99a3f
- SHA512 47cf2fd2c0f5aa13e2be34ccec0ea27b3efcc45dd8a0bc14584ed970df740d8afbb495797727934f974624ed9f0ead1793be238d36dea9900d28145bebb7ea1f
- SSDEEP 393216:iRChsFD5je9yfX97ZfxCmvoRzDXMCHWUjXVcuI3/PGTAI:iBje9y17jBoVDXMb8XiH/O7
- TLSH T1D3E6330CA6D541DFEA634138DEE39AD5E658F431A3F0C8CF8798C3A56F531E0897A612
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-08-01_412bf948c841cf5a9bfc8380afa91cd5_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_412bf948c841cf5a9bfc8380afa91cd5_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_412bf948c841cf5a9bfc8380afa91cd5_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.7MB
- SHA256 f7a5a8053c29252ae6d1e898a93b4f73363768a23a5b779952fc71a1ca3f2e44
- MD5 412bf948c841cf5a9bfc8380afa91cd5
- SHA1 f792f223f9b0e7e37c010ae4ab823a94dfb99a3f
- SHA512 47cf2fd2c0f5aa13e2be34ccec0ea27b3efcc45dd8a0bc14584ed970df740d8afbb495797727934f974624ed9f0ead1793be238d36dea9900d28145bebb7ea1f
- SSDEEP 393216:iRChsFD5je9yfX97ZfxCmvoRzDXMCHWUjXVcuI3/PGTAI:iBje9y17jBoVDXMb8XiH/O7
- TLSH T1D3E6330CA6D541DFEA634138DEE39AD5E658F431A3F0C8CF8798C3A56F531E0897A612
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Loads dropped DLL