2026-08-10_326a3493ed3c93858cbceec122964745_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_326a3493ed3c93858cbceec122964745_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc
Size 4.4MB
Sample260810-het49ashpe
SHA256 5b02b5c193e4d80d44236bb1d1bb52ed529741e51cb189e94cd554862406d82a
MD5 326a3493ed3c93858cbceec122964745
SHA1 dc8a5bc2ccd526728c8e8987dd03d7c3adb115dc
SHA512 cf43a168547b6975d2e533e0750ef6115d83cbd327aff640d665636f970c07fb0e81cbe68c1c56373ad7497fd07c60f32eb87d0bad6f90ae5f9b8d961ed9c4ae
SSDEEP 49152:BgiLUc9I7UhUJdeOo48nJ5Znl8Ir7IZAPKYNO/zoHiR6N2R7Kmv:Ba9wDn2YY/Yrmv
TLSH
T1D7267D46B39580E4C466813989979697F7B17C210F609BCB72A0776E2F33BE16E3B701
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_326a3493ed3c93858cbceec122964745_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc

File Explorer

2026-08-10_326a3493ed3c93858cbceec122964745_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc

.exe 4.4MB

2026-08-10_326a3493ed3c93858cbceec122964745_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc

IMPHASH f5f32ad792504ac5092f44dd77156ef0
SHA256 5b02b5c193e4d80d44236bb1d1bb52ed529741e51cb189e94cd554862406d82a
MD5 326a3493ed3c93858cbceec122964745
SHA1 dc8a5bc2ccd526728c8e8987dd03d7c3adb115dc
SHA512 cf43a168547b6975d2e533e0750ef6115d83cbd327aff640d665636f970c07fb0e81cbe68c1c56373ad7497fd07c60f32eb87d0bad6f90ae5f9b8d961ed9c4ae
SSDEEP 49152:BgiLUc9I7UhUJdeOo48nJ5Znl8Ir7IZAPKYNO/zoHiR6N2R7Kmv:Ba9wDn2YY/Yrmv
TLSH
T1D7267D46B39580E4C466813989979697F7B17C210F609BCB72A0776E2F33BE16E3B701
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2042280

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

api-ms-win-shcore-scaling-l1-1-1

SetProcessDpiAwareness

user32

RegisterClassW CreateWindowExW ShowWindow DispatchMessageW SendMessageW TranslateMessage GetMessageW DefWindowProcW MoveWindow SetWindowPos GetSystemMenu EnableMenuItem FillRect IntersectRect InflateRect ReleaseDC GetDC GetMessageTime PeekMessageW GetAncestor SystemParametersInfoA ScreenToClient GetCursor GetCursorPos SetCursor ShowCursor InvalidateRect GetUpdateRect EndPaint BeginPaint KillTimer SetTimer ReleaseCapture SetCapture GetAsyncKeyState SetFocus EmptyClipboard GetClipboardData SetClipboardData CloseClipboard OpenClipboard GetDoubleClickTime TrackMouseEvent GetDpiForSystem GetDpiForWindow LoadIconW LoadCursorW EnumChildWindows SetWindowLongPtrW GetWindowLongPtrW SetWindowLongW GetWindowLongW MessageBoxW GetWindowRect GetClientRect

gdi32

StretchDIBits CreateSolidBrush GetTextMetricsA SetMapMode GetGlyphIndicesW GetFontUnicodeRanges GetOutlineTextMetricsA GetGlyphOutlineW GetFontData GetCharWidth32A CreateFontIndirectW GetDeviceCaps ExtTextOutW SetTextAlign SetTextColor SaveDC RestoreDC GdiFlush CreateDIBSection ModifyWorldTransform SetWorldTransform GetWorldTransform SetGraphicsMode ExtSelectClipRgn SelectClipRgn IntersectClipRect GetGraphicsMode GetClipRgn GetClipBox ExtCreateRegion CreateRectRgn SetBkMode SelectObject DeleteDC CreateCompatibleDC CreateCompatibleBitmap BitBlt DeleteObject

advapi32

DeleteService RegCreateKeyExW RegSetValueExW AllocateAndInitializeSid QueryServiceConfigW OpenServiceW OpenSCManagerW EnumServicesStatusExW RegCloseKey ControlService CloseServiceHandle RegOpenKeyExW FreeSid CheckTokenMembership

ws2_32

WSACleanup WSAStartup

comdlg32

GetSaveFileNameW GetOpenFileNameW

shell32

DragQueryFileW ShellExecuteExW

ole32

OleInitialize ReleaseStgMedium CoCreateInstance CoInitialize RegisterDragDrop OleUninitialize RevokeDragDrop

kernel32

IsDebuggerPresent GetStartupInfoW RtlUnwindEx InterlockedPushEntrySList RtlUnwind FreeLibrary CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW SetStdHandle GetFileType ExitProcess GetStdHandle GetConsoleMode ReadConsoleW GetConsoleOutputCP FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale IsProcessorFeaturePresent GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers SetFilePointerEx HeapSize HeapQueryInformation IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter SetEndOfFile RemoveDirectoryW GlobalAlloc UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext InitializeSListHead GetCPInfo GetStringTypeW LCMapStringEx DecodePointer EncodePointer WakeAllConditionVariable CreateFileW DeleteFileW WriteFile GetTempPathW CloseHandle GetLastError WaitForSingleObject GetExitCodeProcess CreateProcessW GetModuleFileNameW SetLastError CreateIoCompletionPort GetQueuedCompletionStatus PostQueuedCompletionStatus EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEvent SleepEx CreateEventW SetWaitableTimer WaitForMultipleObjects CreateWaitableTimerW QueueUserAPC TerminateThread TlsAlloc TlsGetValue TlsSetValue TlsFree LocalFree FormatMessageA AllocConsole GetModuleHandleW GetWindowsDirectoryW WriteConsoleW GlobalUnlock GlobalLock GlobalFree MultiByteToWideChar WideCharToMultiByte InitializeCriticalSection TryEnterCriticalSection LoadLibraryExW LoadLibraryW FormatMessageW GetProcAddress GetVersionExA GetModuleFileNameA GetModuleHandleA FindClose FindFirstFileExW FindNextFileW GetFullPathNameW MapViewOfFile UnmapViewOfFile CreateFileMappingA GetFullPathNameA GetTempPathA GetWindowsDirectoryA LoadLibraryA GetFileAttributesExA GetLongPathNameA CreateFileA GetFileSizeEx ReadFile HeapAlloc HeapReAlloc HeapFree GetProcessHeap GetCurrentProcessId GetSystemTimeAsFileTime QueryPerformanceCounter QueryPerformanceFrequency ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive SleepConditionVariableSRW Sleep GetCurrentThreadId RtlPcToFileHeader RaiseException GetLocaleInfoEx GetCurrentDirectoryW CreateDirectoryW GetFileAttributesExW SetFileAttributesW AreFileApisANSI MoveFileExW InitializeCriticalSectionEx

msimg32

AlphaBlend

Name

.text

Size

2.2MB

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.0MB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

62KB

Virtual Size

78KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

121KB

Virtual Size

120KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_326a3493ed3c93858cbceec122964745_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc

api-ms-win-shcore-scaling-l1-1-1

user32

gdi32

advapi32

ws2_32

comdlg32

shell32

ole32

kernel32

msimg32

generic