General
- Target 2026-08-16_b2a7179c30f1e2591e99b3bedfdab221_avaddon_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat_zxxz
- Size 61.5MB
- Sample260816-ee9m6aba92
- SHA256 5d0ceb5012dc6cfffadec12034c97c51660d23193c8e945c353f03eb6ccf1ec0
- MD5 b2a7179c30f1e2591e99b3bedfdab221
- SHA1 4a71c2dd759bc7bd60a71e61fc0b5c7679bae213
- SHA512 06e79271443078f9b9236b613dd046bc6de1ca3609df883587af876631f185d82b9adab5f39357d9075d2714ae0c36fa23dfd7c31dc800f1d320341d5459ed41
- SSDEEP 393216:xjdEj3GNgfktSe0f71WPDxyGQ/3io3/FoET72JEcz6hg1Piv5kdsIGoRo6nVeEkp:Vdlyi2IcIwdyaRsw8UD87dGVr
- TLSH T1C4E7BE0663E111A6D573D178CB9B6103EB72B40B2334DBDB369C43642FA3BE45A7AB50
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-16_b2a7179c30f1e2591e99b3bedfdab221_avaddon_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat_zxxz.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_b2a7179c30f1e2591e99b3bedfdab221_avaddon_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat_zxxz
- Size 61.5MB
- SHA256 5d0ceb5012dc6cfffadec12034c97c51660d23193c8e945c353f03eb6ccf1ec0
- MD5 b2a7179c30f1e2591e99b3bedfdab221
- SHA1 4a71c2dd759bc7bd60a71e61fc0b5c7679bae213
- SHA512 06e79271443078f9b9236b613dd046bc6de1ca3609df883587af876631f185d82b9adab5f39357d9075d2714ae0c36fa23dfd7c31dc800f1d320341d5459ed41
- SSDEEP 393216:xjdEj3GNgfktSe0f71WPDxyGQ/3io3/FoET72JEcz6hg1Piv5kdsIGoRo6nVeEkp:Vdlyi2IcIwdyaRsw8UD87dGVr
- TLSH T1C4E7BE0663E111A6D573D178CB9B6103EB72B40B2334DBDB369C43642FA3BE45A7AB50
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.