General
- Target 2026-08-15_5f5c3091e19bf2e1bf83b4672031b796_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 8.9MB
- Sample260815-2fwh9avcka
- SHA256 913fc119047f82e315f3c464660a53404b6e3cdcd00f82e2cd8ce9fe130b515a
- MD5 5f5c3091e19bf2e1bf83b4672031b796
- SHA1 f770f06bcf9c87579e6eda7b1346711666ddc995
- SHA512 d5e2f03b129b17f5cee95771488e1440ef1be7b8d1a47b5a705dd1aac720b8bcdc6e07ad129ec765b5d488f5066c73e7d1d5323417181b7890e6e66f24dfe062
- SSDEEP 196608:hztzzXxuBwB9drbdXQaN+MofR4RmhxXs1HswqApCTFDE7E:5tXx/hrbdXQfM6R4RmhxiHswqAi/
- TLSH T12A96334896E015FAD463103E8964C615E3F27D220FA6D9DF17B40B2E2F6B2E15C3D63A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_5f5c3091e19bf2e1bf83b4672031b796_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_5f5c3091e19bf2e1bf83b4672031b796_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_5f5c3091e19bf2e1bf83b4672031b796_blankgrabber_glassworm_icedid_luca-stealer_njrat
- Size 8.9MB
- SHA256 913fc119047f82e315f3c464660a53404b6e3cdcd00f82e2cd8ce9fe130b515a
- MD5 5f5c3091e19bf2e1bf83b4672031b796
- SHA1 f770f06bcf9c87579e6eda7b1346711666ddc995
- SHA512 d5e2f03b129b17f5cee95771488e1440ef1be7b8d1a47b5a705dd1aac720b8bcdc6e07ad129ec765b5d488f5066c73e7d1d5323417181b7890e6e66f24dfe062
- SSDEEP 196608:hztzzXxuBwB9drbdXQaN+MofR4RmhxXs1HswqApCTFDE7E:5tXx/hrbdXQfM6R4RmhxiHswqAi/
- TLSH T12A96334896E015FAD463103E8964C615E3F27D220FA6D9DF17B40B2E2F6B2E15C3D63A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Adds Run key to start application
-
Executes a VBScript file via the Windows Script Host.
-
Sets desktop wallpaper using registry
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2Visual Basic
1Windows Command Shell
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Accessibility Features
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Accessibility Features
1