Analysis
- max time kernel
150s - max time network
134s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/08/2026, 03:22
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-09_10ea785f885fdfa3a01517ff9d0141f1_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_10ea785f885fdfa3a01517ff9d0141f1_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
General
- Target 2026-08-09_10ea785f885fdfa3a01517ff9d0141f1_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc.exe
- Size 3.5MB
- Sample260809-dwyrjszaje
- SHA256 8b853ef277cb73560199bf6081a8d1bad57ed077028f9ab0c3df4860d1f1afeb
- MD5 10ea785f885fdfa3a01517ff9d0141f1
- SHA1 2bb0d5e1b859c6257365a80231581b7718bf3c62
- SHA512 d186108635b5af0bb94635be1cb233f96ec94bef8faa2dbdb27ad1be44ede77e02611e91d4fcfd5e99bcf1eea9a30fda8229fd855fb7493047b26de83424e9d7
- SSDEEP 98304:V7AnkrLP7+uRYd8Qsjg/Z6YmFHBc7KntG:V7Ikrf+0Yd8Qsjg/Z61F+GntG
- TLSH T1ACF5D04AA3A600EAC1A7C138C756971BE7B230060731ABDF16E54A652F23EE15F7F711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 1 raw.githubusercontent.com 2 raw.githubusercontent.com - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1900 2026-08-09_10ea785f885fdfa3a01517ff9d0141f1_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-09_10ea785f885fdfa3a01517ff9d0141f1_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-09_10ea785f885fdfa3a01517ff9d0141f1_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:1900