General
- Target 2026-08-08_cb7a54e77e833e0cfd984ef4a9c49a3a_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.6MB
- Sample260808-rh4yasyarc
- SHA256 599584e6e42436721a66c2d3fbc29fe0d9be0b0e3f9e0f5f0333293e293920fc
- MD5 cb7a54e77e833e0cfd984ef4a9c49a3a
- SHA1 7277302b2aff555f45fa7839aef63797dfd958de
- SHA512 f2ac700ad9074d8a88210a6eadbbc1981afb0d499ec219c2e75879b56bec240daaa1d1a65ab4edc6984f72d1ec82d98925dcec259668e28b22c40ba9453198f1
- SSDEEP 393216:/GmlE2rAcCDTstHAXMCHWUjlcuI3/PGTAI:/GKhuXMb8SH/O7
- TLSH T1C8E63309B7D015FEE6A3923CEEE22224D4A674B42331C9CB53E846E26D573D05C7DB26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-08-08_cb7a54e77e833e0cfd984ef4a9c49a3a_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_cb7a54e77e833e0cfd984ef4a9c49a3a_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_cb7a54e77e833e0cfd984ef4a9c49a3a_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.6MB
- SHA256 599584e6e42436721a66c2d3fbc29fe0d9be0b0e3f9e0f5f0333293e293920fc
- MD5 cb7a54e77e833e0cfd984ef4a9c49a3a
- SHA1 7277302b2aff555f45fa7839aef63797dfd958de
- SHA512 f2ac700ad9074d8a88210a6eadbbc1981afb0d499ec219c2e75879b56bec240daaa1d1a65ab4edc6984f72d1ec82d98925dcec259668e28b22c40ba9453198f1
- SSDEEP 393216:/GmlE2rAcCDTstHAXMCHWUjlcuI3/PGTAI:/GKhuXMb8SH/O7
- TLSH T1C8E63309B7D015FEE6A3923CEEE22224D4A674B42331C9CB53E846E26D573D05C7DB26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Loads dropped DLL