General
- Target 2026-08-09_bce98fb20bc4a8ab8bb4aff3f13e186e_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 15.7MB
- Sample260809-21tv6aeq8t
- SHA256 b3608731bf18309056aa12aa8ec500c1f5fb55193964264dcfa76cdefc27e669
- MD5 bce98fb20bc4a8ab8bb4aff3f13e186e
- SHA1 83ee28dee2964af6a43e8ffc9517cc30a5008d22
- SHA512 1683baed57c5981e7f1c0a7a05f1d6aeed02cd29be19598e02e03c7a946b203dccd0805789eeb8d4578380f99ac4a38e8367ff30d2d6481873d458b7a652b33d
- SSDEEP 393216:U85vzasFl7dCR1C9991W8y7JvaCnc7H07mfE3+d9UjhQtZKVIqj:X5vzJFlUR1O91W8iJiCnGH07rOd96hUc
- TLSH T105F633897B8414CCDCAF6376D9C18167A7E2F9720B58C19787B89B192D672E0FD3A340
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-09_bce98fb20bc4a8ab8bb4aff3f13e186e_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_bce98fb20bc4a8ab8bb4aff3f13e186e_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_bce98fb20bc4a8ab8bb4aff3f13e186e_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 15.7MB
- SHA256 b3608731bf18309056aa12aa8ec500c1f5fb55193964264dcfa76cdefc27e669
- MD5 bce98fb20bc4a8ab8bb4aff3f13e186e
- SHA1 83ee28dee2964af6a43e8ffc9517cc30a5008d22
- SHA512 1683baed57c5981e7f1c0a7a05f1d6aeed02cd29be19598e02e03c7a946b203dccd0805789eeb8d4578380f99ac4a38e8367ff30d2d6481873d458b7a652b33d
- SSDEEP 393216:U85vzasFl7dCR1C9991W8y7JvaCnc7H07mfE3+d9UjhQtZKVIqj:X5vzJFlUR1O91W8iJiCnGH07rOd96hUc
- TLSH T105F633897B8414CCDCAF6376D9C18167A7E2F9720B58C19787B89B192D672E0FD3A340
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Loads dropped DLL