General
- Target 2026-08-14_7eddbba160874ec9496e453ef61976b7_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat
- Size 73.2MB
- Sample260814-v23fcsfj5s
- SHA256 822314385957d311396555e150a46093d5c1b0cd674e2fa555f6c63064325b90
- MD5 7eddbba160874ec9496e453ef61976b7
- SHA1 8e330b536c6247bf98975cbe3eaa8ae1986d643a
- SHA512 e266b1d87516baa18f7c04a5a3b2bd7d70159333e8dee1ff92601653430ea1bb56e1586fba0f54133d8431f70a4ebadf0038ae044556449f8d400b96c0b3bd66
- SSDEEP 1572864:e5fjqET0CBvgngQx8QcO7Ri3Y7gGYBPl19Gf21HbwIFiEByEM:eNV0KvgMP38edGfWwCNd
- TLSH T185F733558441057FDD724231A9A1E124CD22FC355AB8CAA6DFCC4349EE7BBECAC32E49
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Behavioral task
behavioral1
Sample
2026-08-14_7eddbba160874ec9496e453ef61976b7_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_7eddbba160874ec9496e453ef61976b7_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_7eddbba160874ec9496e453ef61976b7_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat
- Size 73.2MB
- SHA256 822314385957d311396555e150a46093d5c1b0cd674e2fa555f6c63064325b90
- MD5 7eddbba160874ec9496e453ef61976b7
- SHA1 8e330b536c6247bf98975cbe3eaa8ae1986d643a
- SHA512 e266b1d87516baa18f7c04a5a3b2bd7d70159333e8dee1ff92601653430ea1bb56e1586fba0f54133d8431f70a4ebadf0038ae044556449f8d400b96c0b3bd66
- SSDEEP 1572864:e5fjqET0CBvgngQx8QcO7Ri3Y7gGYBPl19Gf21HbwIFiEByEM:eNV0KvgMP38edGfWwCNd
- TLSH T185F733558441057FDD724231A9A1E124CD22FC355AB8CAA6DFCC4349EE7BBECAC32E49
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE
-
Loads dropped DLL