2026-08-11_9e81a653091e106273da87ec69283cf3_akira_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-11_9e81a653091e106273da87ec69283cf3_akira_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc
Size 2.7MB
Sample260811-2dp9fsha75
SHA256 867d643ba8054092d4bc1d4de75c1ce131323ff29056f42c558f8e60140bfab3
MD5 9e81a653091e106273da87ec69283cf3
SHA1 2411d4a4bfbca0e0b7329ce4f2ec0c0b5f0409bf
SHA512 5bf6162c2ade54de10016aae59b46edc347f2ee8ab072745c1c055c54ec3e9578833af12b27fb021cee2e085d4d10a08a4ded5361e606b2ceab20bedfcbf9b17
SSDEEP 49152:0JaDZdfxDDfPS+q23SYb1kbc/4NLkMrSprJ6fJ8/eUVSX/yTh5Tu+8obWkaNy:jDZdfxDDfPPSVIJ+mVSX/yTh5Tu+y0
TLSH
T1A5D59D17A3A451E8C1BAD078C9566A17F77234494360ABDF07F04A762FA3BE15A7F302
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-11_9e81a653091e106273da87ec69283cf3_akira_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc

File Explorer

2026-08-11_9e81a653091e106273da87ec69283cf3_akira_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc

.exe 2.7MB

2026-08-11_9e81a653091e106273da87ec69283cf3_akira_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc

IMPHASH 54b4b8bee0015bdb1ee829ec701f171c
SHA256 867d643ba8054092d4bc1d4de75c1ce131323ff29056f42c558f8e60140bfab3
MD5 9e81a653091e106273da87ec69283cf3
SHA1 2411d4a4bfbca0e0b7329ce4f2ec0c0b5f0409bf
SHA512 5bf6162c2ade54de10016aae59b46edc347f2ee8ab072745c1c055c54ec3e9578833af12b27fb021cee2e085d4d10a08a4ded5361e606b2ceab20bedfcbf9b17
SSDEEP 49152:0JaDZdfxDDfPS+q23SYb1kbc/4NLkMrSprJ6fJ8/eUVSX/yTh5Tu+8obWkaNy:jDZdfxDDfPPSVIJ+mVSX/yTh5Tu+y0
TLSH
T1A5D59D17A3A451E8C1BAD078C9566A17F77234494360ABDF07F04A762FA3BE15A7F302
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1625144

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

avrt

AvRevertMmThreadCharacteristics AvSetMmThreadCharacteristicsW

winmm

waveOutPrepareHeader waveInReset waveOutClose waveOutOpen waveOutWrite waveOutGetNumDevs waveOutGetDevCapsW waveOutUnprepareHeader waveInStart waveInAddBuffer waveInUnprepareHeader waveInPrepareHeader waveInClose waveInOpen waveInGetDevCapsW waveInGetNumDevs waveInStop

kernel32

CreateEventW GetCurrentThread SetThreadPriority GetThreadPriority TlsFree TlsAlloc MultiByteToWideChar WriteConsoleW RaiseException FreeLibrary FormatMessageW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage SetEndOfFile HeapReAlloc GetTimeZoneInformation DeleteFileW CloseHandle WideCharToMultiByte LoadLibraryW GetProcAddress GetModuleHandleExW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW VirtualProtect FlsFree WaitForSingleObjectEx FlsGetValue FlsAlloc HeapFree HeapAlloc ExitProcess SetFilePointerEx GetConsoleOutputCP WriteFile ReadConsoleW GetConsoleMode FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetDriveTypeW SetStdHandle FreeLibraryAndExitThread ExitThread InitializeCriticalSectionAndSpinCount RtlUnwindEx InitializeSListHead GetCurrentProcessId GetStartupInfoW GetModuleFileNameW Sleep CreateMutexA GetLastError GetTempPathW SetCurrentDirectoryW TlsSetValue TlsGetValue DebugBreak IsDebuggerPresent SetEnvironmentVariableW GetProcessHeap HeapSize HeapQueryInformation FlsSetValue ResetEvent FlushFileBuffers IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCPInfo ReleaseSRWLockExclusive AcquireSRWLockExclusive EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection QueryPerformanceFrequency SleepEx QueryPerformanceCounter GetTickCount SetLastError CreateFileW GetFullPathNameW MoveFileExW CreateThread GetEnvironmentVariableA GetModuleHandleW GetStdHandle GetFileType ReadFile PeekNamedPipe WaitForMultipleObjects VerSetConditionMask VerifyVersionInfoW GetFileSizeEx LocalFree TryAcquireSRWLockExclusive GetCurrentThreadId FormatMessageA WakeAllConditionVariable SleepConditionVariableSRW SwitchToThread GetExitCodeThread RtlPcToFileHeader InitOnceBeginInitialize InitOnceComplete GetLocaleInfoEx GetCurrentDirectoryW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW GetFileInformationByHandle AreFileApisANSI GetFileInformationByHandleEx GetStringTypeW LoadLibraryExW EncodePointer DecodePointer GetSystemTimeAsFileTime LCMapStringEx RtlUnwind

user32

GetForegroundWindow

shell32

SHGetKnownFolderPath

ole32

CLSIDFromString StringFromCLSID PropVariantClear CoCreateInstance CoInitializeEx CoUninitialize CoTaskMemFree

advapi32

RegCloseKey CryptReleaseContext RegCreateKeyExW RegSetValueExW CryptGetHashParam CryptEncrypt CryptImportKey CryptDestroyKey CryptDestroyHash CryptHashData CryptCreateHash CryptAcquireContextW

ws2_32

connect bind accept WSACleanup getsockname ntohs socket htons WSAGetLastError closesocket WSAWaitForMultipleEvents WSAResetEvent WSAEventSelect WSAEnumNetworkEvents WSACreateEvent WSACloseEvent send getsockopt recv setsockopt WSASetLastError WSAIoctl __WSAFDIsSet select htonl listen getaddrinfo freeaddrinfo recvfrom sendto ioctlsocket getpeername gethostname WSAStartup

crypt32

CertFreeCertificateChainEngine CertGetNameStringW CertFindExtension CertFreeCTLContext CertAddCertificateContextToStore CertFreeCRLContext CryptDecodeObjectEx PFXImportCertStore CryptStringToBinaryW CertFreeCertificateContext CertFindCertificateInStore CertEnumCertificatesInStore CertCloseStore CertOpenStore CertGetCertificateChain CertFreeCertificateChain CertCreateCertificateChainEngine CryptQueryObject

bcrypt

BCryptGenRandom BCryptDestroyHash BCryptFinishHash BCryptHashData BCryptCreateHash BCryptCloseAlgorithmProvider BCryptGetProperty BCryptOpenAlgorithmProvider

iphlpapi

if_nametoindex

secur32

InitSecurityInterfaceW

?wxbaseu_init@@YAHXZ alAuxiliaryEffectSlotPlaySOFT alAuxiliaryEffectSlotPlayvSOFT alAuxiliaryEffectSlotStopSOFT alAuxiliaryEffectSlotStopvSOFT alAuxiliaryEffectSlotf alAuxiliaryEffectSlotfv alAuxiliaryEffectSloti alAuxiliaryEffectSlotiv alBuffer3f alBuffer3i alBufferCallbackSOFT alBufferData alBufferSamplesSOFT alBufferStorageSOFT alBufferSubDataSOFT alBufferSubSamplesSOFT alBufferf alBufferfv alBufferi alBufferiv alDeferUpdatesSOFT alDeleteAuxiliaryEffectSlots alDeleteBuffers alDeleteEffects alDeleteFilters alDeleteSources alDisable alDistanceModel alDopplerFactor alDopplerVelocity alEffectf alEffectfv alEffecti alEffectiv alEnable alEventCallbackSOFT alEventControlSOFT alFilterf alFilterfv alFilteri alFilteriv alFlushMappedBufferSOFT alGenAuxiliaryEffectSlots alGenBuffers alGenEffects alGenFilters alGenSources alGetAuxiliaryEffectSlotf alGetAuxiliaryEffectSlotfv alGetAuxiliaryEffectSloti alGetAuxiliaryEffectSlotiv alGetBoolean alGetBooleanv alGetBuffer3PtrSOFT alGetBuffer3f alGetBuffer3i alGetBufferPtrSOFT alGetBufferPtrvSOFT alGetBufferSamplesSOFT alGetBufferf alGetBufferfv alGetBufferi alGetBufferiv alGetDouble alGetDoublev alGetEffectf alGetEffectfv alGetEffecti alGetEffectiv alGetEnumValue alGetError alGetFilterf alGetFilterfv alGetFilteri alGetFilteriv alGetFloat alGetFloatv alGetInteger alGetInteger64SOFT alGetInteger64vSOFT alGetIntegerv alGetListener3f alGetListener3i alGetListenerf alGetListenerfv alGetListeneri alGetListeneriv alGetPointerSOFT alGetPointervSOFT alGetProcAddress alGetSource3dSOFT alGetSource3f alGetSource3i alGetSource3i64SOFT alGetSourcedSOFT alGetSourcedvSOFT alGetSourcef alGetSourcefv alGetSourcei alGetSourcei64SOFT alGetSourcei64vSOFT alGetSourceiv alGetString alGetStringiSOFT alIsAuxiliaryEffectSlot alIsBuffer alIsBufferFormatSupportedSOFT alIsEffect alIsEnabled alIsExtensionPresent alIsFilter alIsSource alListener3f alListener3i alListenerf alListenerfv alListeneri alListeneriv alMapBufferSOFT alProcessUpdatesSOFT alSource3dSOFT alSource3f alSource3i alSource3i64SOFT alSourcePause alSourcePausev alSourcePlay alSourcePlayv alSourceQueueBufferLayersSOFT alSourceQueueBuffers alSourceRewind alSourceRewindv alSourceStop alSourceStopv alSourceUnqueueBuffers alSourcedSOFT alSourcedvSOFT alSourcef alSourcefv alSourcei alSourcei64SOFT alSourcei64vSOFT alSourceiv alSpeedOfSound alUnmapBufferSOFT alcCaptureCloseDevice alcCaptureOpenDevice alcCaptureSamples alcCaptureStart alcCaptureStop alcCloseDevice alcCreateContext alcDestroyContext alcDevicePauseSOFT alcDeviceResumeSOFT alcGetContextsDevice alcGetCurrentContext alcGetEnumValue alcGetError alcGetInteger64vSOFT alcGetIntegerv alcGetProcAddress alcGetString alcGetStringiSOFT alcGetThreadContext alcIsExtensionPresent alcIsRenderFormatSupportedSOFT alcLoopbackOpenDeviceSOFT alcMakeContextCurrent alcOpenDevice alcProcessContext alcRenderSamplesSOFT alcResetDeviceSOFT alcSetThreadContext alcSuspendContext alsoft_get_version

Name

.text

Size

1.8MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

611KB

Virtual Size

611KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

172KB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

86KB

Virtual Size

86KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-11_9e81a653091e106273da87ec69283cf3_akira_blankgrabber_glassworm_icedid_luca-stealer_njrat_stealc

avrt

winmm

kernel32

user32

shell32

ole32

advapi32

ws2_32

crypt32

bcrypt

iphlpapi

secur32

generic