General
- Target 2026-08-09_1f61c4f6d1f9c595d5bec25481fdb746_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat_zxxz
- Size 111.6MB
- Sample260809-r6lfvss1by
- SHA256 0d046a125df313fd6d79e097e739048c360051dc1ef97da9ed15bcbcf1b02863
- MD5 1f61c4f6d1f9c595d5bec25481fdb746
- SHA1 29a87e2456fe241a9b10205ddd07779d4bf89c12
- SHA512 d464e5825a7c6637021edbea544135b1bcf6a78a5ccce58f5cbbb07f82061064a0126f98e99b64798e80f3fdd4bee99277ab54dc08aec269e688724c64829584
- SSDEEP 1572864:1Pp36F/iKRzTo0EL9uXpXFxAI/MZqNrGZVOc4XIoC3MnluZQrZu:1PpIlTheuXpX/z/5NivOcC7hlTrQ
- TLSH T17448F01663A111AAD577D178C7AB6203EB72B40713308BDB329C43652F73AE45E7BB60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_1f61c4f6d1f9c595d5bec25481fdb746_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat_zxxz.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_1f61c4f6d1f9c595d5bec25481fdb746_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat_zxxz.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_1f61c4f6d1f9c595d5bec25481fdb746_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat_zxxz
- Size 111.6MB
- SHA256 0d046a125df313fd6d79e097e739048c360051dc1ef97da9ed15bcbcf1b02863
- MD5 1f61c4f6d1f9c595d5bec25481fdb746
- SHA1 29a87e2456fe241a9b10205ddd07779d4bf89c12
- SHA512 d464e5825a7c6637021edbea544135b1bcf6a78a5ccce58f5cbbb07f82061064a0126f98e99b64798e80f3fdd4bee99277ab54dc08aec269e688724c64829584
- SSDEEP 1572864:1Pp36F/iKRzTo0EL9uXpXFxAI/MZqNrGZVOc4XIoC3MnluZQrZu:1PpIlTheuXpX/z/5NivOcC7hlTrQ
- TLSH T17448F01663A111AAD577D178C7AB6203EB72B40713308BDB329C43652F73AE45E7BB60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003)
-
Executes dropped EXE