2026-08-13_6a165f1ee3ebebd54750c6a291b6e161_blankgrabber_coinminer_icedid_luca-stealer_njrat

General

Target
2026-08-13_6a165f1ee3ebebd54750c6a291b6e161_blankgrabber_coinminer_icedid_luca-stealer_njrat
Size 15.2MB
Sample260813-lbnd3sem61
SHA256 ce55af78f97ce5e1a86b703ef0e656fbcb222259d1703691d6eb92d92226d49d
MD5 6a165f1ee3ebebd54750c6a291b6e161
SHA1 02811ef0ea72eb420e4d1abc372b148ad4592d87
SHA512 8f24009e930fedaf22b09ad63f70ed67c3740f8f6e7a640ed87832de04d017aff56411b0c92b506e7ae8bc695d4be692493224517ebbb85d45dc31e4b6f442c9
SSDEEP 393216:Gi03jg8n7X+JHldmfILWlq9CSaX14ty4KpZ06U9Q4Egj:mfSrLaq9CSm14k4mx6Fj
TLSH
T10DF6331BB1A104F7E0ABB2B955A555436AF2F8121712A6EB03FDA56D6C072C10C7FF0B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-13_6a165f1ee3ebebd54750c6a291b6e161_blankgrabber_coinminer_icedid_luca-stealer_njrat

File Explorer

2026-08-13_6a165f1ee3ebebd54750c6a291b6e161_blankgrabber_coinminer_icedid_luca-stealer_njrat

.exe 15.2MB

2026-08-13_6a165f1ee3ebebd54750c6a291b6e161_blankgrabber_coinminer_icedid_luca-stealer_njrat

IMPHASH a0e5830bfb4abd4228091a16cae82c8f
SHA256 ce55af78f97ce5e1a86b703ef0e656fbcb222259d1703691d6eb92d92226d49d
MD5 6a165f1ee3ebebd54750c6a291b6e161
SHA1 02811ef0ea72eb420e4d1abc372b148ad4592d87
SHA512 8f24009e930fedaf22b09ad63f70ed67c3740f8f6e7a640ed87832de04d017aff56411b0c92b506e7ae8bc695d4be692493224517ebbb85d45dc31e4b6f442c9
SSDEEP 393216:Gi03jg8n7X+JHldmfILWlq9CSaX14ty4KpZ06U9Q4Egj:mfSrLaq9CSm14k4mx6Fj
TLSH
T10DF6331BB1A104F7E0ABB2B955A555436AF2F8121712A6EB03FDA56D6C072C10C7FF0B
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

54148

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

SHFileOperationW SHGetFolderPathW CommandLineToArgvW

kernel32

RtlUnwindEx WriteConsoleW SetEndOfFile ReadConsoleW CreateDirectoryW ReadFile SetConsoleCtrlHandler AddDllDirectory GetCommandLineW GetStdHandle WriteFile GetShortPathNameW SetConsoleMode TerminateProcess GetModuleFileNameW SetEnvironmentVariableW K32GetModuleFileNameExW GetEnvironmentVariableW GetTempPathW WaitForSingleObject CreateFileW GetFileAttributesW GetModuleHandleA OpenProcess Sleep GetConsoleMode GetLastError AttachConsole CloseHandle SetStdHandle GetProcAddress GetCurrentProcessId CreateProcessW WideCharToMultiByte GetSystemTimeAsFileTime FormatMessageA QueryPerformanceCounter SetDllDirectoryW LoadLibraryExW GetExitCodeProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsProcessorFeaturePresent GetCurrentThreadId InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW HeapReAlloc SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary EncodePointer RaiseException RtlPcToFileHeader ExitProcess GetModuleHandleExW GetFileType GetCommandLineA HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect LCMapStringW MultiByteToWideChar GetStringTypeW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetFileSizeEx SetFilePointerEx HeapSize

Name

.text

Size

152KB

Virtual Size

151KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

15.0MB

Virtual Size

15.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

169KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-13_6a165f1ee3ebebd54750c6a291b6e161_blankgrabber_coinminer_icedid_luca-stealer_njrat

shell32

kernel32

generic