General
- Target 2026-08-05_f0d2934199c9f86d25014d628cd7385a_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.7MB
- Sample260805-hf97vsfa87
- SHA256 b2b6c906f355c11945f84134f27559acce2247ae2214d544734bddf97e9ee22c
- MD5 f0d2934199c9f86d25014d628cd7385a
- SHA1 90734748b072f42f9f89ba03057a6f9ab4bed72f
- SHA512 b7ab982c76d90e7b47b2842d81cb8d14c5c5f024c694d6dce57f727a6f1e45071e9d3b08b4626124a617609f8672dd07f371adb9aab65ac6f3fee4977a60a37c
- SSDEEP 393216:gGmBNg/ns+tSi2mo4AeyViEuMMXMCHWUjShcuI3/PGTAI:gGOg/PtSGAe8kMMXMb8S2H/O7
- TLSH T1B0E633589BD003FDEDB3A2BC9EC28286D564B43A8765C8D74B6C8BA63D071F04939753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-08-05_f0d2934199c9f86d25014d628cd7385a_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_f0d2934199c9f86d25014d628cd7385a_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_f0d2934199c9f86d25014d628cd7385a_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.7MB
- SHA256 b2b6c906f355c11945f84134f27559acce2247ae2214d544734bddf97e9ee22c
- MD5 f0d2934199c9f86d25014d628cd7385a
- SHA1 90734748b072f42f9f89ba03057a6f9ab4bed72f
- SHA512 b7ab982c76d90e7b47b2842d81cb8d14c5c5f024c694d6dce57f727a6f1e45071e9d3b08b4626124a617609f8672dd07f371adb9aab65ac6f3fee4977a60a37c
- SSDEEP 393216:gGmBNg/ns+tSi2mo4AeyViEuMMXMCHWUjShcuI3/PGTAI:gGOg/PtSGAe8kMMXMb8S2H/O7
- TLSH T1B0E633589BD003FDEDB3A2BC9EC28286D564B43A8765C8D74B6C8BA63D071F04939753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Loads dropped DLL