General
- Target 2026-08-06_7e971e4d8d0da30f8e342bd0408a38e9_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 66.1MB
- Sample260806-vm34cazwfv
- SHA256 38d6f4678d3eb9825a652d1a2949f4efa79f28e3242fe433b9bf4836bd3886b4
- MD5 7e971e4d8d0da30f8e342bd0408a38e9
- SHA1 b1c9ad6ea5c8391fe87f134018ff593e69257ed1
- SHA512 d4a68a7dc2bcc9255eba730c3c80d49b8a4a163e98103d0f98cdbc373eac7fc6ffb6e519a1a757f3d40715fc9f53e99e24fdeca7d60c1129acac3c810172c444
- SSDEEP 1572864:6ynddZn0XJVrvo2pUg9NoX0REsGQb120oZ/hvXG8vLzR0qxk/:jCv7ig9NXSDhv286qxk
- TLSH T181E7339115A14553F987D33EA9D48A3AB2F270706A7247CF43D882983DA71E69D3CBF0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-08-06_7e971e4d8d0da30f8e342bd0408a38e9_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_7e971e4d8d0da30f8e342bd0408a38e9_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_7e971e4d8d0da30f8e342bd0408a38e9_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 66.1MB
- SHA256 38d6f4678d3eb9825a652d1a2949f4efa79f28e3242fe433b9bf4836bd3886b4
- MD5 7e971e4d8d0da30f8e342bd0408a38e9
- SHA1 b1c9ad6ea5c8391fe87f134018ff593e69257ed1
- SHA512 d4a68a7dc2bcc9255eba730c3c80d49b8a4a163e98103d0f98cdbc373eac7fc6ffb6e519a1a757f3d40715fc9f53e99e24fdeca7d60c1129acac3c810172c444
- SSDEEP 1572864:6ynddZn0XJVrvo2pUg9NoX0REsGQb120oZ/hvXG8vLzR0qxk/:jCv7ig9NXSDhv286qxk
- TLSH T181E7339115A14553F987D33EA9D48A3AB2F270706A7247CF43D882983DA71E69D3CBF0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application