General
- Target 2026-08-13_6a165f1ee3ebebd54750c6a291b6e161_blankgrabber_coinminer_icedid_luca-stealer_njrat
- Size 15.2MB
- Sample260813-lbnd3sem61
- SHA256 ce55af78f97ce5e1a86b703ef0e656fbcb222259d1703691d6eb92d92226d49d
- MD5 6a165f1ee3ebebd54750c6a291b6e161
- SHA1 02811ef0ea72eb420e4d1abc372b148ad4592d87
- SHA512 8f24009e930fedaf22b09ad63f70ed67c3740f8f6e7a640ed87832de04d017aff56411b0c92b506e7ae8bc695d4be692493224517ebbb85d45dc31e4b6f442c9
- SSDEEP 393216:Gi03jg8n7X+JHldmfILWlq9CSaX14ty4KpZ06U9Q4Egj:mfSrLaq9CSm14k4mx6Fj
- TLSH T10DF6331BB1A104F7E0ABB2B955A555436AF2F8121712A6EB03FDA56D6C072C10C7FF0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_6a165f1ee3ebebd54750c6a291b6e161_blankgrabber_coinminer_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_6a165f1ee3ebebd54750c6a291b6e161_blankgrabber_coinminer_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_6a165f1ee3ebebd54750c6a291b6e161_blankgrabber_coinminer_icedid_luca-stealer_njrat
- Size 15.2MB
- SHA256 ce55af78f97ce5e1a86b703ef0e656fbcb222259d1703691d6eb92d92226d49d
- MD5 6a165f1ee3ebebd54750c6a291b6e161
- SHA1 02811ef0ea72eb420e4d1abc372b148ad4592d87
- SHA512 8f24009e930fedaf22b09ad63f70ed67c3740f8f6e7a640ed87832de04d017aff56411b0c92b506e7ae8bc695d4be692493224517ebbb85d45dc31e4b6f442c9
- SSDEEP 393216:Gi03jg8n7X+JHldmfILWlq9CSaX14ty4KpZ06U9Q4Egj:mfSrLaq9CSm14k4mx6Fj
- TLSH T10DF6331BB1A104F7E0ABB2B955A555436AF2F8121712A6EB03FDA56D6C072C10C7FF0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
-
Loads dropped DLL