General
- Target 2026-08-05_af95eebad3e5ad1579da34e4f6348f30_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 11.8MB
- Sample260805-2bae8aszd1
- SHA256 760c02b5992dd2b7caccdb060fbe2a14d33cf823295e018691bb71383b957b64
- MD5 af95eebad3e5ad1579da34e4f6348f30
- SHA1 0a8beadc0d980101bc77d2e29ad8c8abc35610ad
- SHA512 77b466c0b244b1941ea8a9d5cd67a1eef90b2bb99d105368061f567ff45526374f1fa72af548f837500c81e03f4b80bb727a4c88b6e32f32a48d3b744680521a
- SSDEEP 196608:xFFU7F6Sq67xPFm7X9Kn2KDU2Oxuwe2M1CUBwmZAJK7jMjLThVUTme:lyF1xg02nxu2KPeJK7wzC
- TLSH T104C6121E7EAC01E4C1BEC138C55B650AEA713CA5033596DB22F4AE192F37AE14E7E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-05_af95eebad3e5ad1579da34e4f6348f30_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_af95eebad3e5ad1579da34e4f6348f30_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer.exe
Resource
win11ltsc2024-20260710-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_af95eebad3e5ad1579da34e4f6348f30_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 11.8MB
- SHA256 760c02b5992dd2b7caccdb060fbe2a14d33cf823295e018691bb71383b957b64
- MD5 af95eebad3e5ad1579da34e4f6348f30
- SHA1 0a8beadc0d980101bc77d2e29ad8c8abc35610ad
- SHA512 77b466c0b244b1941ea8a9d5cd67a1eef90b2bb99d105368061f567ff45526374f1fa72af548f837500c81e03f4b80bb727a4c88b6e32f32a48d3b744680521a
- SSDEEP 196608:xFFU7F6Sq67xPFm7X9Kn2KDU2Oxuwe2M1CUBwmZAJK7jMjLThVUTme:lyF1xg02nxu2KPeJK7wzC
- TLSH T104C6121E7EAC01E4C1BEC138C55B650AEA713CA5033596DB22F4AE192F37AE14E7E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks for any installed AV software in registry
-
Downloads MZ/PE file
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.