General
- Target 2026-08-15_08e2198812424259b2708391fb626167_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat_zxxz
- Size 111.6MB
- Sample260815-jv21gascke
- SHA256 85b09f61a550dffeca77a33e8741b01f666166fac3a3f203b6fa0564916773bd
- MD5 08e2198812424259b2708391fb626167
- SHA1 c76d6e266f0fc405f022b1b6df3808cd635d74d3
- SHA512 d2c233e5ebbf32a12161c7fe8d05f1859109c7f1d88525986d6fe0a15659efdc6331951cd5ec2b0f027b28a05742ac17e9b37e103a73b88decdb087b34422749
- SSDEEP 1572864:1Pp36F/iKRzlo0EL9uXpXFxAI/MZqNrGZVOc4XIoC3MnluZQrZ1:1PpIllheuXpX/z/5NivOcC7hlTr7
- TLSH T17148F01663A111AAD577D138C7AB6603EB72B40713308BDB329C43652F73AE45E7BB60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_08e2198812424259b2708391fb626167_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat_zxxz.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_08e2198812424259b2708391fb626167_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat_zxxz.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_08e2198812424259b2708391fb626167_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat_zxxz
- Size 111.6MB
- SHA256 85b09f61a550dffeca77a33e8741b01f666166fac3a3f203b6fa0564916773bd
- MD5 08e2198812424259b2708391fb626167
- SHA1 c76d6e266f0fc405f022b1b6df3808cd635d74d3
- SHA512 d2c233e5ebbf32a12161c7fe8d05f1859109c7f1d88525986d6fe0a15659efdc6331951cd5ec2b0f027b28a05742ac17e9b37e103a73b88decdb087b34422749
- SSDEEP 1572864:1Pp36F/iKRzlo0EL9uXpXFxAI/MZqNrGZVOc4XIoC3MnluZQrZ1:1PpIllheuXpX/z/5NivOcC7hlTr7
- TLSH T17148F01663A111AAD577D138C7AB6603EB72B40713308BDB329C43652F73AE45E7BB60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003)
-
Executes dropped EXE