2026-08-10_b7c282e9e0d46d8a1f5dddf8a9f9ef08_blankgrabber_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_b7c282e9e0d46d8a1f5dddf8a9f9ef08_blankgrabber_icedid_luca-stealer_njrat_stealc
Size 3.4MB
Sample260810-en2nxaap71
SHA256 52695e3dc234db06af6ff810b438cdb1446559d6c6f141334521c19487d70678
MD5 b7c282e9e0d46d8a1f5dddf8a9f9ef08
SHA1 79498b4ec18907fe65832d90d408a21ebce37986
SHA512 e30a6a086a2a2fb9e46f146fc313ffe1ad2a95007af2ecf56eaa40d234967be60294f68e97bab513f4f2d9da64b05e572ffeb4a949832bf53e4e269516d41270
SSDEEP 49152:ubvec7KhHDJIU5RPuIv+Gpzn45xUcLutdbBaAt5+8:lFTUtufBB
TLSH
T1FEF5BE53F75111E9D5769038CAA3932BF336B444072187DB63D8AA296F83BE01F76B84
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_b7c282e9e0d46d8a1f5dddf8a9f9ef08_blankgrabber_icedid_luca-stealer_njrat_stealc

File Explorer

2026-08-10_b7c282e9e0d46d8a1f5dddf8a9f9ef08_blankgrabber_icedid_luca-stealer_njrat_stealc

.exe 3.4MB

2026-08-10_b7c282e9e0d46d8a1f5dddf8a9f9ef08_blankgrabber_icedid_luca-stealer_njrat_stealc

IMPHASH edeb46dca317f23fa4c7f7eef89ce47d
SHA256 52695e3dc234db06af6ff810b438cdb1446559d6c6f141334521c19487d70678
MD5 b7c282e9e0d46d8a1f5dddf8a9f9ef08
SHA1 79498b4ec18907fe65832d90d408a21ebce37986
SHA512 e30a6a086a2a2fb9e46f146fc313ffe1ad2a95007af2ecf56eaa40d234967be60294f68e97bab513f4f2d9da64b05e572ffeb4a949832bf53e4e269516d41270
SSDEEP 49152:ubvec7KhHDJIU5RPuIv+Gpzn45xUcLutdbBaAt5+8:lFTUtufBB
TLSH
T1FEF5BE53F75111E9D5769038CAA3932BF336B444072187DB63D8AA296F83BE01F76B84
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1450556

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Chris\Downloads\external base roblox\x64\Release\something.pdb

d3d11

D3D11CreateDeviceAndSwapChain

dwmapi

DwmExtendFrameIntoClientArea

kernel32

QueryPerformanceFrequency GetProcAddress FreeLibrary QueryPerformanceCounter GetModuleFileNameA Process32First GetCurrentProcess Module32Next GetProcessId Module32First DuplicateHandle OpenProcess CreateToolhelp32Snapshot Process32Next CloseHandle VirtualProtectEx VirtualQueryEx VirtualAllocEx ReleaseMutex ExitProcess SetConsoleTitleA CreateMutexA GetLastError GetSystemInfo AllocConsole CreateFileA GetFileSizeEx ReadFile HeapAlloc HeapReAlloc HeapFree GetProcessHeap MapViewOfFile UnmapViewOfFile CreateFileMappingA InitOnceExecuteOnce GetConsoleOutputCP FlushFileBuffers GetUserDefaultLCID LoadLibraryA GetLocaleInfoW LCMapStringW CompareStringW VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc GetFileType ReadConsoleW GetConsoleMode SetFilePointerEx GetCommandLineW GetCommandLineA WriteFile GetStdHandle GetModuleFileNameW GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount RtlUnwind SetLastError RaiseException RtlPcToFileHeader RtlUnwindEx GetLocaleInfoA GetModuleHandleA GlobalUnlock WideCharToMultiByte GlobalLock SetStdHandle CreateFileW WriteConsoleW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GlobalFree GlobalAlloc MultiByteToWideChar IsValidLocale SetEnvironmentVariableW EnumSystemLocalesW SetEndOfFile GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapQueryInformation HeapSize GetStringTypeW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW IsDebuggerPresent GetStartupInfoW GetModuleHandleW GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead WaitForSingleObjectEx Sleep SwitchToThread GetExitCodeThread ReleaseSRWLockShared AcquireSRWLockShared TryAcquireSRWLockExclusive LCMapStringEx EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer GetCPInfo

user32

SetClipboardData GetClipboardData EmptyClipboard CloseClipboard DefWindowProcW DispatchMessageA DestroyWindow GetSystemMetrics ShowWindow SetWindowDisplayAffinity MoveWindow CreateWindowExA SetLayeredWindowAttributes TranslateMessage PeekMessageA UnregisterClassA PostQuitMessage FindWindowA RegisterClassExA UpdateWindow SetWindowLongA GetAsyncKeyState GetDpiForWindow SendInput GetKeyState GetMessageExtraInfo LoadCursorA ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow SetCapture SetCursor GetClientRect IsWindowUnicode ReleaseCapture SetCursorPos GetCursorPos OpenClipboard

gdi32

CreateSolidBrush

advapi32

LookupPrivilegeValueA AdjustTokenPrivileges OpenProcessToken

ole32

CoCreateInstance PropVariantClear

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmSetCandidateWindow

d3dcompiler_47

D3DCompile

wininet

InternetReadFile InternetCloseHandle InternetOpenA InternetOpenUrlA HttpQueryInfoA InternetSetCookieExA

vcomp140

_vcomp_flush _vcomp_for_static_end _vcomp_for_static_simple_init _vcomp_fork _vcomp_atomic_add_i8

Name

.text

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

910KB

Virtual Size

909KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

781KB

Virtual Size

791KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

68KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

464B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_b7c282e9e0d46d8a1f5dddf8a9f9ef08_blankgrabber_icedid_luca-stealer_njrat_stealc

d3d11

dwmapi

kernel32

user32

gdi32

advapi32

ole32

imm32

d3dcompiler_47

wininet

vcomp140

generic