General
- Target 2026-08-08_a9c6b8aa8dcad8c23bbafd75f9874231_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.6MB
- Sample260808-rm2zhasvht
- SHA256 1e7b81bdbf126727fa8fd61049f68025deede33c2204c2fb8af9465cee9cbd82
- MD5 a9c6b8aa8dcad8c23bbafd75f9874231
- SHA1 8b3d1515aa4c139e5e49e1d855f19b2e363dc07a
- SHA512 e8803b8cd4180bcf92417f8534f451eca42a92de395b275df268d65d9523db15bf9d50b085d6d6bbd94b3c54717099e0f8d5137ea5f1b882544b27394509dbe0
- SSDEEP 393216:mcmGmUVUqgdwjiPKeQbQaCH6qZuVXMCHWUjacuI3/PGTAI:0GXyc2QbRCaCuVXMb8XH/O7
- TLSH T1BFE6334CA1E002EDE6B3123DFDD11E45E5B0B867A7B0C9DB17A493E42E272E09C39657
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-08-08_a9c6b8aa8dcad8c23bbafd75f9874231_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_a9c6b8aa8dcad8c23bbafd75f9874231_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_a9c6b8aa8dcad8c23bbafd75f9874231_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 13.6MB
- SHA256 1e7b81bdbf126727fa8fd61049f68025deede33c2204c2fb8af9465cee9cbd82
- MD5 a9c6b8aa8dcad8c23bbafd75f9874231
- SHA1 8b3d1515aa4c139e5e49e1d855f19b2e363dc07a
- SHA512 e8803b8cd4180bcf92417f8534f451eca42a92de395b275df268d65d9523db15bf9d50b085d6d6bbd94b3c54717099e0f8d5137ea5f1b882544b27394509dbe0
- SSDEEP 393216:mcmGmUVUqgdwjiPKeQbQaCH6qZuVXMCHWUjacuI3/PGTAI:0GXyc2QbRCaCuVXMb8XH/O7
- TLSH T1BFE6334CA1E002EDE6B3123DFDD11E45E5B0B867A7B0C9DB17A493E42E272E09C39657
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Loads dropped DLL