2026-08-09_b6f8070ce800e3ff0e63f1b91f88c89e_blankgrabber_icedid_luca-stealer_njrat

General

Target
2026-08-09_b6f8070ce800e3ff0e63f1b91f88c89e_blankgrabber_icedid_luca-stealer_njrat
Size 18.1MB
Sample260809-q3fwjaaf83
SHA256 06ecdd7890dbc6c8873d72306f0414075bcb4cfb8e41e37507ba5891651cf50e
MD5 b6f8070ce800e3ff0e63f1b91f88c89e
SHA1 b38d700036e82d62072f66def6ec8a6ce5d0f2a6
SHA512 abea4c76c8206747c4a9e577b1e43d1125b7f92089a07610143c761313ae4f71c1b3e7a89701695e95a7d9cb913f84f317c4f851527147ed75db8ae1e00d288a
SSDEEP 393216:evkugomrbf7pMTCdNbkU7Guq4qUvQWaU4XGtL4:evIomX1GCnbkxuBquTaU4C8
TLSH
T1041733A4735964F8F9534338AAD856CAE71A38B14135D8CF20B19421AF34BC86FBF746
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-08-09_b6f8070ce800e3ff0e63f1b91f88c89e_blankgrabber_icedid_luca-stealer_njrat

File Explorer

2026-08-09_b6f8070ce800e3ff0e63f1b91f88c89e_blankgrabber_icedid_luca-stealer_njrat

.exe 18.1MB

2026-08-09_b6f8070ce800e3ff0e63f1b91f88c89e_blankgrabber_icedid_luca-stealer_njrat

IMPHASH 807b238063cb8c173b7348845fd3b8e0
SHA256 06ecdd7890dbc6c8873d72306f0414075bcb4cfb8e41e37507ba5891651cf50e
MD5 b6f8070ce800e3ff0e63f1b91f88c89e
SHA1 b38d700036e82d62072f66def6ec8a6ce5d0f2a6
SHA512 abea4c76c8206747c4a9e577b1e43d1125b7f92089a07610143c761313ae4f71c1b3e7a89701695e95a7d9cb913f84f317c4f851527147ed75db8ae1e00d288a
SSDEEP 393216:evkugomrbf7pMTCdNbkU7Guq4qUvQWaU4XGtL4:evIomX1GCnbkxuBquTaU4C8
TLSH
T1041733A4735964F8F9534338AAD856CAE71A38B14135D8CF20B19421AF34BC86FBF746
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

06:17:f5:97:cc:35:cc:ca:d1:c1:a6:db:98:c0:d8:b5:28:5c:2c:71:2d:2a:41:12:16:67:be:0c:d4:5c:f8:d7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=BonesMalin

Chains

Aug 1, 2026

CN=BonesMalin

Subject

CN=BonesMalin

Serial Number

5f:df:2d:01:4c:08:5b:95:4a:81:94:f8:b6:f3:b0:27

Issuer

CN=BonesMalin

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 25, 2026 - Jan 25, 2031

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

53092

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

SHFileOperationW SHGetFolderPathW CommandLineToArgvW

kernel32

WriteConsoleW HeapReAlloc CreateDirectoryW SetConsoleCtrlHandler AddDllDirectory GetCommandLineW GetFullPathNameW GetStdHandle WriteFile GetShortPathNameW TerminateProcess GetModuleFileNameW SetEnvironmentVariableW K32GetModuleFileNameExW GetEnvironmentVariableW GetTempPathW WaitForSingleObject CreateFileW GetFileAttributesW GetModuleHandleA OpenProcess Sleep GetLastError CloseHandle GetProcAddress GetCurrentProcessId CreateProcessW WideCharToMultiByte GetSystemTimeAsFileTime FormatMessageA QueryPerformanceCounter SetDllDirectoryW LoadLibraryExW GetExitCodeProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsProcessorFeaturePresent GetCurrentThreadId InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW HeapSize RtlUnwindEx SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary EncodePointer RaiseException RtlPcToFileHeader ExitProcess GetModuleHandleExW GetCommandLineA HeapAlloc MultiByteToWideChar HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect LCMapStringW GetFileType GetStringTypeW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx

Name

.text

Size

141KB

Virtual Size

140KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

17.7MB

Virtual Size

17.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

169KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

179KB

Virtual Size

179KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_b6f8070ce800e3ff0e63f1b91f88c89e_blankgrabber_icedid_luca-stealer_njrat

PE Signature issue

shell32

kernel32

generic