General
- Target 2026-08-01_4db16c03331d7f6edeb7abe6e817bdc7_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.6MB
- Sample260802-a5es9aaq41
- SHA256 d1aa14da8393421a6f3a418d6241457a8346bbc9ebc2bad656d1ad50a20e53bf
- MD5 4db16c03331d7f6edeb7abe6e817bdc7
- SHA1 242204bdeae785c4bb7759f03fd2cabde5039f39
- SHA512 b89211392444e8fb8679fc1fd6cbbeb541febbd5ab36a46e1880256617dace7355f73aa77eae15608fa3c2ccabe9b15683f4be1dbf9f4cec580128c044de404c
- SSDEEP 393216:6HRhnfCayCJdo7el+CMOKlXMCHWUjXbcuI3/PGTAI:6LfRVo7eQiKlXMb8XYH/O7
- TLSH T123E6335CA5E013FDF9335179EEA164A2E5E878760B32CD8F42689661FE431E08D3D227
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-08-01_4db16c03331d7f6edeb7abe6e817bdc7_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_4db16c03331d7f6edeb7abe6e817bdc7_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_4db16c03331d7f6edeb7abe6e817bdc7_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.6MB
- SHA256 d1aa14da8393421a6f3a418d6241457a8346bbc9ebc2bad656d1ad50a20e53bf
- MD5 4db16c03331d7f6edeb7abe6e817bdc7
- SHA1 242204bdeae785c4bb7759f03fd2cabde5039f39
- SHA512 b89211392444e8fb8679fc1fd6cbbeb541febbd5ab36a46e1880256617dace7355f73aa77eae15608fa3c2ccabe9b15683f4be1dbf9f4cec580128c044de404c
- SSDEEP 393216:6HRhnfCayCJdo7el+CMOKlXMCHWUjXbcuI3/PGTAI:6LfRVo7eQiKlXMb8XYH/O7
- TLSH T123E6335CA5E013FDF9335179EEA164A2E5E878760B32CD8F42689661FE431E08D3D227
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Loads dropped DLL