General
- Target 2026-08-12_28b6deb9662bf13699ec99f2c38584fa_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 23.0MB
- Sample260812-pjbl2atxct
- SHA256 e04ced8df6a210cbdd19970616a3a8662550441e2622183a88c4dbd2024c45a1
- MD5 28b6deb9662bf13699ec99f2c38584fa
- SHA1 0970c14f5e7fd8609b02bcf68c55eff94fc3d7e9
- SHA512 130eb55f431fbbd05a22960910514a5e7edf7a8cc6db30544150e60bff7c8940310c841c80bb7ba2f434555ffe3986e9935f3b7117aeda2a5d13b073e45e554d
- SSDEEP 393216:3tSd/fZaKBsRvKCYcZSiuBr5kcroE8S49uCpDvV+53SM8+0MIjxPNUCQ+yrsD4+B:9S7aKCBuv8Eb4kC9vV/M8+0TNVUCQ3s1
- TLSH T17137331436E01AEDE593E13B421ADC055670BE12236FC9CEA37971113DB7AE6143BFA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Google.js
Resource
win10v2004-20260513-en
13 signatures
600 seconds
Behavioral task
behavioral2
Sample
Google.js
Resource
win11ltsc2024-20260709-en
15 signatures
600 seconds
Malware Config
Targets
-
- Target Google.pyc
- Size 147KB
- SHA256 9e3abb837d599d7d05d29abcc3e75e64e49f96a8db969b354416aa1daa067521
- MD5 ea63d4ddcbe8c8a62db8aba9ead6527e
- SHA1 0317a52f6d81fe77775de13a7021ef40698d9b89
- SHA512 f94c8f3af72cce92e53f1fb4cdbd6846e7f5936ec6c6b581aa53088ec3230e749413e9c14d8763e7415ff5e828365c1a8ed5247f9c3e316f9410fe5182f36cf0
- SSDEEP 3072:jf6vvlzVPH0L5a5XCKIArM6p3ahVweJyILt40p:jf29hPH0Va5y3ArM6mgWt40p
- TLSH T1C3E36B42ACBD492FDA61A07980EB5401F36A1DC375048B32B53D51343FEB6AAF9B271D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.